Security & Testing Agent Skills for HTTP / API

Dark web monitoring involves systematically scanning Tor hidden services,

Conduct disk forensics investigations using forensic imaging, file system

Enumerates DNS records, attempts zone transfers, brute-forces subdomains,

Detects DNS tunneling by computing Shannon entropy of DNS query names,

Performs runtime dynamic analysis of Android applications using Frida,

Perform interactive dynamic malware analysis using the ANY.RUN cloud sandbox

Performs digital forensics investigation on compromised endpoints including

Runs entitlement review and access certification campaigns in SailPoint

Conduct a comprehensive external network penetration test to identify

Reduces SIEM false positives through systematic rule tuning, threshold

Performs firmware image extraction and analysis using binwalk to identify

Analyzes firmware images for embedded malware, backdoors, and unauthorized

Performs GraphQL introspection attacks that extract the full API schema

Assessing GraphQL API endpoints for introspection leaks, injection attacks,

Cracks password hashes with Hashcat, covering hash-type identification,

Executes HTTP Parameter Pollution attacks that inject duplicate request

Performs ICS/OT asset discovery with Claroty xDome, combining passive

Tracks IOCs through discovery, enrichment/validation (VirusTotal, Shodan,

Automates Indicator of Compromise (IOC) enrichment by orchestrating

Performs comprehensive iOS application security assessments using Frida

Execute and test the JWT none algorithm attack, crafting tokens with