Skill UI

This guide details advanced hash cracking techniques using Hashcat, the world's fastest password recovery tool. It covers various attack modes—including dictionary, brute-force, and rule-based attacks—and supports numerous common hash types (e.g., NTLM, bcrypt). This skill is strictly designed for authorized security assessments and penetration testing to evaluate the strength and resilience of organizational password policies.

This guide details the technique and workflow for executing HTTP Parameter Pollution (HPP) attacks. HPP exploits how web applications and back-end systems handle duplicate HTTP parameters (e.g., first-wins, last-wins, concatenation). It is a critical method for bypassing Web Application Firewalls (WAFs), testing input validation logic, and identifying vulnerabilities in API, OAuth, and payment processing flows.

This tool provides comprehensive asset discovery and inventory management for Operational Technology (OT) and Industrial Control Systems (ICS) environments using the Claroty xDome platform. It utilizes passive monitoring and active querying to achieve full visibility into critical assets across Purdue Model levels, including PLCs, RTUs, and HMIs. Ideal for compliance assessments (e.g., IEC 62443) and onboarding brownfield sites.

This skill provides a systematic framework for managing Indicators of Compromise (IOCs) throughout their entire life cycle—from initial discovery and validation to enrichment, deployment, monitoring, and eventual retirement. It emphasizes implementing confidence decay functions, tracking hit rates, and managing false positives to maintain a high-quality, actionable threat intelligence database, thereby minimizing analyst fatigue and maximizing detection efficacy.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.

This skill provides a comprehensive, multi-stage guide for investigating insider threats. It covers the entire lifecycle, from receiving an allegation and ensuring legal authorization, to covert evidence collection (DLP logs, endpoint forensics), advanced user behavior pattern analysis, and reconstructing a detailed activity timeline for potential legal action. Essential for security incident response.

This skill automates the enrichment of Indicators of Compromise (IOCs) by orchestrating lookups across multiple industry-leading threat intelligence sources (e.g., VirusTotal, AbuseIPDB, Shodan). It provides contextual scoring and disposition recommendations for IPs, domains, URLs, and hashes. Ideal for SOC analysts during alert triage or incident investigation to quickly assess risk and scope.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

This skill utilizes the Shodan API to perform comprehensive IP reputation analysis. It enriches IP addresses by identifying open ports, running services, known vulnerabilities (CVEs), and hosting context. It is crucial for threat intelligence enrichment, incident triage, and security assessments, helping security professionals assess the risk level and potential compromise of exposed infrastructure.

This tool automates the process of executing the JWT none algorithm attack. It demonstrates how to bypass signature verification by setting the 'alg' header to 'none' in a JSON Web Token. This vulnerability allows attackers to forge tokens with arbitrary claims, such as escalating privileges or impersonating other users, and is crucial for penetration testing and API security auditing.

A comprehensive guide detailing the Kerberoasting attack process, a critical post-exploitation technique in Active Directory environments. This method targets service accounts by requesting TGS tickets for accounts with Service Principal Names (SPNs), allowing attackers to capture encrypted tickets for offline password cracking. Essential for security assessments and red team simulations.

A comprehensive security auditing tool designed to assess a Kubernetes cluster's compliance posture against established CIS benchmarks. It performs deep checks on control plane components (API Server, etcd, Controller Manager), worker nodes, and Role-Based Access Control (RBAC). Use it for proactive security assessments, compliance validation, and hardening throughout the CI/CD lifecycle.