Skill UI

LaZagne is an open-source post-exploitation tool utilized by red teams to harvest stored credentials from compromised endpoints. It supports Windows, Linux, and macOS, extracting passwords from browsers (Chrome, Edge), databases (MySQL, SQLite), system vaults (DPAPI, LSA), and various applications. It is crucial for privilege escalation and lateral movement during authorized security assessments.

This tool facilitates interactive dynamic malware analysis using the ANY.RUN cloud sandbox. It allows analysts to detonate suspicious samples, observe real-time execution behavior, and manually interact with prompts (like dialogs or CAPTCHAs). Key outputs include detailed process trees, network traffic analysis (C2 communication), and identification of all Indicators of Compromise (IOCs), mapping observed behaviors to MITRE ATT&CK. Essential for rapid, sophisticated behavioral analysis without maintaining local sandbox infrastructure.

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

This skill automates GraphQL introspection attacks to extract the complete API schema, including all types, queries, mutations, and subscriptions. It maps the attack surface, tests for query depth limits, and exploits GraphQL-specific weaknesses like batching attacks or nested query DoS. Used for comprehensive GraphQL security auditing and penetration testing.

This skill details how to execute HTTP Parameter Pollution (HPP) attacks. HPP exploits differences in how web applications and Web Application Firewalls (WAFs) process duplicate parameters within a single request (e.g., query strings or POST bodies). It is crucial for penetration testing to bypass input validation, WAF rules, and uncover parameter parsing inconsistencies in APIs and web forms.

This script automates the process of conducting comprehensive ICS/OT asset discovery using the Claroty xDome API. It facilitates inventorying critical industrial assets (PLCs, RTUs, HMIs) across various Purdue Model levels. Ideal for brownfield environments, preparing for IEC 62443 compliance, and gaining visibility into undocumented operational technology networks.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

This skill utilizes the Shodan API to perform comprehensive IP reputation analysis. It enriches IP addresses by identifying open ports, running services, known vulnerabilities (CVEs), and hosting context. It is crucial for threat intelligence enrichment, incident triage, and security assessments, helping security professionals assess the risk level and potential compromise of exposed infrastructure.

This comprehensive guide provides a systematic methodology for performing Kubernetes cluster penetration testing. It evaluates security by simulating diverse attacker techniques against key components such as the API server, etcd, RBAC policies, and network configurations. Users can identify critical misconfigurations and vulnerabilities using specialized tools (kube-hunter, Kubescape, kube-bench) and manual exploitation steps, ensuring clusters meet robust security standards. Ideal for authorized security audits and compliance validation.

This skill leverages the VirusTotal API v3 to enrich file hashes (MD5, SHA-256). It retrieves comprehensive security data, including multi-engine detection rates, sandbox behavioral reports, YARA rule matches, and related Indicators of Compromise (IOCs). It is essential for SOC triage, incident response, and threat intelligence workflows.

This tool performs a comprehensive review of OAuth 2.0 scopes, identifying over-permissioned third-party application integrations, excessive API scopes, and unused token grants. It is crucial for implementing the principle of least privilege across complex identity providers and SaaS ecosystems. Use cases include compliance auditing (GDPR, SOC 2), post-incident security reviews, and managing shadow IT risk by auditing cross-boundary consent grants.

This skill automates the monitoring of public paste sites (e.g., Pastebin, GitHub Gists) to detect leaked credentials, API keys, and sensitive data dumps. It employs advanced regex patterns and keyword matching to provide early warning of security breaches, crucial for incident response, vulnerability assessment, and threat intelligence gathering.