Hunt ssrf
Hunting skill for ssrf vulnerabilities.
Skills for your AI
AI skills for security
Hunt ssti
Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.
Hunt subdomain
Hunting skill for subdomain takeover vulnerabilities.
Hunt tls network
Hunt TLS/SSL and DNS misconfigurations
Hunt websocket
Hunt WebSocket vulnerabilities
Hunt xss
Hunting skill for xss vulnerabilities.
Hunt xxe
Hunting skill for xxe vulnerabilities.
Incident management
Implement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.
Incident response
Handle security incidents with IR playbooks and procedures.
Ios redteam pipeline
End-to-end iOS red-team pipeline
Iso27001 compliance
Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.
Kubernetes hardening
Implement Kubernetes security contexts, Pod Security Standards, and network policies.
Linux hardening
Apply CIS benchmarks and secure Linux servers.
Llm app security
Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.
M365 entra attack
Microsoft 365 / Entra ID red-team attack chain
Mcp server security
Secure Model Context Protocol (MCP) servers with transport encryption, tool authorization, input validation, and audit logging for safe AI agent integrations.
Meme coin audit
Meme coin and token security audit
Mid engagement ir detection
Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement
Model supply chain security
Secure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and trusted model promotion.
Offensive osint
Operational arsenal for authorized external red-team and bug-bounty recon.
Okta attack
Okta-as-IdP red-team attack chain
Openclaw deployment hardening
Secure OpenClaw deployments with preflight hardening checks, CI/CD guardrails, container runtime restrictions, and post-deploy verification.
Openclaw security hardening
Harden OpenClaw self-hosted environments with baseline host controls, auth tightening, secret handling, network segmentation, and safe update/rollback workflows.
Osint methodology
Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments.