Find the perfect skill
Attack Tree Construction
Security
Build comprehensive attack trees to visualize threat paths, identify defense gaps, and communicate security risks to stakeholders.
Containerized Security Auditing
Security
Security auditing and ethical hacking tools running in isolated Docker containers, including network scanning, SAST, SCA, and exploit execution.
Testing for Broken Access Control
Security
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations: open databases, storage buckets, auth issues, exposed cloud functions. For authorized security research only.
DeFi AMM Security
Security
Security checklist for Solidity AMM contracts covering reentrancy, donation attacks, oracle manipulation, and more. Use when auditing or writing liquidity pool or swap code.
Security Bounty Hunter
Security
Hunt for exploitable, remotely reachable vulnerabilities for bug bounty programs. Filters out low-signal findings and focuses on issues with real impact.
Analyzing Kubernetes Audit Logs
Security
Parses Kubernetes API server audit logs to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds SIEM detection rules from event patterns for investigating cluster compromise.
Python Sandbox Escape
Security
Provides techniques to escape restricted Python eval/exec environments, including basic command execution, class hierarchy traversal, and keyword bypasses using encoding or concatenation. Useful for penetration testing and CTF challenges involving Python jails or sandbox restrictions.
Full Penetration Testing Workflow
Security
Automated pentest workflow chaining reconnaissance, exploitation, post-exploitation, and exfiltration.
Analyzing Threat Landscape with MISP
Security
Query a MISP instance to compute event statistics, IOC type breakdowns, threat actor clusters, and tag trends; generate threat landscape reports with temporal trends.
PII Detection
Security
Detect and flag personally identifiable information (PII) in text, code, and configurations before committing, logging, or storing data.
Regular Patching of RDS Systems
Security
Ensure RDS instances and database engines are regularly updated to address vulnerabilities, following CIS AWS Database Benchmark v2.0.0 control 3.8.