SUEYTAME

Extract DPAPI-protected secrets such as credentials and browser data offline and online.

Take over Active Directory user and computer accounts by writing alternate certificate keys to msDS-KeyCredentialLink (Shadow Credentials)…

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2…

Test vector stores for embedding inversion, cross-tenant leakage, and poisoning.

Enumerate Entra ID with ROADrecon and acquire and exchange tokens with roadtx.

Run Microsoft Entra ID tenant reconnaissance, token acquisition and manipulation, and federation backdoor testing with the AADInternals…

Pre-deployment security audit of Solidity smart contracts in a Foundry project.

Find over-permissive RBAC roles and service-account token abuse paths in Kubernetes using kubectl auth can-i, rbac-police…

Scan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.

Use Intel CHIPSEC to assess platform firmware configuration, SPI flash write protection, BIOS lock, SMM/SMRR, and Secure Boot variable…

Run CIS Kubernetes Benchmark checks and remediate findings with kube-bench.

Architect redirectors with nginx and Apache, malleable profiles, and OPSEC