Assess SSL/TLS server configurations using the sslyze Python scanning library to evaluate supported protocol versions, cipher suite…
Enumerate subdomains of target domains using ProjectDiscovery's Subfinder
Simulates and detects software supply chain attacks: typosquatting detection via Levenshtein distance against popular PyPI package names…
Executes Atomic Red Team tests for MITRE ATT&CK technique validation
Performs proactive threat hunting in Elastic Security SIEM using KQL/EQL
Use YARA pattern-matching rules to hunt for malware, suspicious files,
Conducts a sector-specific threat landscape assessment (financial, healthcare, energy, government, etc.) by profiling targeting threat…
Uses OWASP Threat Dragon (web or desktop) to build data flow diagrams, identify threats with STRIDE, LINDDUN, CIA, DIE, or PLOT4ai…
Simulates VLAN hopping attacks using switch spoofing and 802.1Q double tagging techniques in authorized lab environments to test VLAN…
Performs authenticated and unauthenticated vulnerability scanning using
Bypasses Web Application Firewall protections using encoding tricks,
Performs systematic security testing of web applications following the
Exploiting web cache mechanisms to serve malicious content to other users
Captures WPA/WPA2 handshakes and performs offline password cracking
Execute a wireless network penetration test to assess WiFi security by
Conduct wireless network security assessments using Kismet to detect
Develops precise YARA and YARA-X rules for malware detection by identifying
Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security…
Implement Perplexity load testing, auto-scaling, and capacity planning strategies.
Implement Perplexity lint rules, policy enforcement, and automated guardrails.
Work with Persona verification types: government ID, selfie, database