Skill UI

A comprehensive guide for writing, debugging, and maintaining Windows batch files (.bat/.cmd). This skill covers advanced CMD scripting techniques, including environment variable management, complex control flow (IF, FOR), argument parsing, delayed expansion, and command chaining. Ideal for automating system tasks, creating command-line utilities (CLI), managing deployments, or writing scheduled task scripts in Windows environments.

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

A deep-dive playbook covering expert techniques for Path Traversal and Local File Inclusion (LFI). It details multiple bypass methods (encoding, null bytes, wrappers), target file enumeration on Linux and Windows, and advanced Remote Code Execution (RCE) escalation paths, such as log poisoning via PHP wrappers.

A comprehensive playbook detailing advanced techniques for establishing and maintaining remote command-line access. Covers foundational knowledge like reverse vs. bind shells, encrypted communication methods (OpenSSL, socat), web shell implementation (PHP, ASPX, JSP), PTY upgrading for interactivity, robust file transfer methods (Linux/Windows), and advanced PowerShell payloads.

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.

A comprehensive playbook detailing expert techniques for lateral movement across Windows networks. It covers various protocols and methods for pivoting between compromised hosts, including PsExec, WMI, WinRM, DCOM, SMB, RDP, and advanced credential techniques like Pass-the-Hash (PTH) and Pass-the-Ticket (PTT).

A comprehensive guide and toolkit for performing End-to-End (E2E) testing on native Windows desktop applications (WPF, WinForms, Win32, Qt) using pywinauto and the Windows UI Automation (UIA) API. Covers setup, locator strategies, and page object modeling for robust desktop automation.

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

Provides comprehensive, programmatic control over tmux sessions. Users can list, capture output from, send specific keystrokes, and programmatically navigate panes/windows in remote, long-running interactive CLI sessions. Essential for monitoring AI code generation tools (like Claude/Codex) or managing complex multi-terminal workflows via scripting.

A comprehensive guide to the Tabular Editor 2 command-line interface (CLI). It provides essential syntax and usage examples for automating data model management. Key functions include deploying models to XMLA endpoints, executing inline C# scripts, running Best Practice Analyzer (BPA), validating schemas, and integrating model processes into CI/CD pipelines in Windows environments.

This skill guide provides comprehensive implementation details for the Metro/Modern UI style, mimicking the aesthetic of Windows Phone/8 start screens. It focuses on creating sharply cornered, flat-color tiles arranged in a horizontally scrolling grid. Key features include live data updates (e.g., tile flipping) and replicating the classic interactive 'tilt' effect. Applicable for cross-platform development using Web (CSS), iOS (SwiftUI), and Flutter.

This skill provides comprehensive guidance on detecting post-exploitation credential dumping activities, such as LSASS memory access, SAM registry hive extraction, and NTDS.dit theft. It utilizes advanced log sources, including Sysmon Event ID 10 (ProcessAccess), Windows Security logs, and SIEM correlation rules, to identify suspicious process behaviors and malicious tool usage, mapping these detections to MITRE ATT&CK techniques.