All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,246
- 1,219
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,241–3,264 of 29,246 skills
- Implementing Google Workspace Sso ConfigurationConfigure SAML 2.0 single sign-on for Google Workspace with a third-partyVotes: 0GitHub stars: 9
- Implementing Google Workspace Phishing ProtectionConfigure Google Workspace advanced phishing and malware protection settingsVotes: 0GitHub stars: 9
- Implementing Google Workspace Admin Security'Implements comprehensive Google Workspace security hardening includingVotes: 0GitHub stars: 9
- Implementing Azure Ad Privileged Identity ManagementConfigure Microsoft Entra Privileged Identity Management to enforce just-in-timeVotes: 0GitHub stars: 9
- Extracting Credentials From Memory DumpExtract cached credentials, password hashes, Kerberos tickets, and authenticationVotes: 0GitHub stars: 9
- Exploiting Zerologon Vulnerability Cve 2020 1472Exploit the Zerologon vulnerability (CVE-2020-1472) in the Netlogon RemoteVotes: 0GitHub stars: 9
- Exploiting Nosql Injection VulnerabilitiesDetect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB,Votes: 0GitHub stars: 9
- Exploiting Ms17 010 Eternalblue VulnerabilityMS17-010 (EternalBlue) is a critical vulnerability in Microsoft's SMBv1Votes: 0GitHub stars: 9
- Exploiting Kerberoasting With ImpacketPerform Kerberoasting attacks using Impacket's GetUserSPNs to extractVotes: 0GitHub stars: 9
- Exploiting Jwt Algorithm Confusion Attack'Exploits JWT algorithm confusion vulnerabilities where the server''sVotes: 0GitHub stars: 9
- Exploiting Http Request SmugglingDetecting and exploiting HTTP request smuggling vulnerabilities causedVotes: 0GitHub stars: 9
- Exploiting Aws With PacuUse Pacu modules for AWS privilege escalation, persistence, and backdooring.Votes: 0GitHub stars: 9
- Exploiting Adcs With CertipyEnumerate and exploit Active Directory Certificate Services ESC1 through ESC16 misconfigurations with Certipy, including SAN abuse, NTLM relay to web enrollment (ESC8), and golden certificate forgery.Votes: 0GitHub stars: 9
- Escaping Containers To HostExploit privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during authorized container-security assessments.Votes: 0GitHub stars: 9
- Detecting T1003 Credential Dumping With EdrDetect OS credential dumping techniques targeting LSASS memory, SAM database,Votes: 0GitHub stars: 9
- Detecting Spearphishing With Email GatewaySpearphishing targets specific individuals using personalized, researchedVotes: 0GitHub stars: 9
- Detecting Oauth Token Theft'Detects and responds to OAuth token theft and replay attacks in cloudVotes: 0GitHub stars: 9
- Detecting Credential Dumping TechniquesDetect LSASS credential dumping, SAM database extraction, and NTDS.ditVotes: 0GitHub stars: 9
- Configuring Oauth2 Authorization FlowConfigure secure OAuth 2.0 authorization flows including AuthorizationVotes: 0GitHub stars: 9
- Configuring Ldap Security HardeningHarden LDAP directory services against common attacks including credentialVotes: 0GitHub stars: 9
- Configuring Identity Aware Proxy With Google Iap'Configuring Google Cloud Identity-Aware Proxy (IAP) to enforce per-requestVotes: 0GitHub stars: 9
- Conducting Social Engineering Penetration TestDesign and execute a social engineering penetration test including phishing,Votes: 0GitHub stars: 9
- Conducting Phishing Incident Response'Responds to phishing incidents by analyzing reported emails, extractingVotes: 0GitHub stars: 9
- Coercing Authentication With Coercer PetitpotamTrigger machine account authentication with PetitPotam (MS-EFSR) and Coercer across MS-RPRN, MS-DFSNM, and MS-FSRVP to feed NTLM relay into AD CS Web Enrollment (ESC8) and other relay targets.Votes: 0GitHub stars: 9