Security & Testing Agent Skills

Analyzes firmware images for embedded malware, backdoors, and unauthorized

Performs GraphQL introspection attacks that extract the full API schema

Assessing GraphQL API endpoints for introspection leaks, injection attacks,

Cracks password hashes with Hashcat, covering hash-type identification,

Executes HTTP Parameter Pollution attacks that inject duplicate request

Performs ICS/OT asset discovery with Claroty xDome, combining passive

Tracks IOCs through discovery, enrichment/validation (VirusTotal, Shodan,

Automates Indicator of Compromise (IOC) enrichment by orchestrating

Performs comprehensive iOS application security assessments using Frida

Execute and test the JWT none algorithm attack, crafting tokens with

Perform Kerberoasting, a post-exploitation technique that enumerates

Assesses the security posture of the etcd cluster backing Kubernetes: encryption at rest, TLS peer and client transport, access control…

Detects lateral movement techniques including Pass-the-Hash, PsExec,

Perform lateral movement across Windows networks using WMI-based remote

Perform forensic investigation of Linux system logs including syslog,

Collect, parse, and correlate system, application, and security logs

Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal

Malware IOC extraction is the process of analyzing malicious software

Systematically investigate all persistence mechanisms on Windows and

Analyze volatile memory (RAM) dumps using the Volatility 3 framework

Bypasses SSL/TLS certificate pinning implementations in Android and