All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,144
- 1,298
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 15,193–15,216 of 31,144 skills
- Cyber Exploiting Adcs With Certipy[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Enumerate and exploit Active Directory Certificate Services ESC1 through ESC16 misconfigurations with Certipy, including SAN abuse, NTLM relay to web enrollment (ESC8), and golden certificate forgery.Votes: 0GitHub stars: 2
- Cyber Exploiting Active Directory With Bloodhound[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] BloodHound is a graph-based Active Directory reconnaissance tool that uses graph theory to reveal hidden and unintended relationships within AD environments. Red teams use BloodHound to identify attacVotes: 0GitHub stars: 2
- Cyber Exploiting Active Directory Certificate Services Esc1[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1 vulnerability to request certificates as high-privileged users and escalate domain privileges during authorized red team assessments.Votes: 0GitHub stars: 2
- Cyber Executing Nist Rmf Authorization To Operate>- Drive a federal system through the NIST Risk Management Framework (SP 800-37 Rev 2) to an Authorization to Operate (ATO): Prepare, Categorize (FIPS 199), Select a control baseline (FIPS 200 / SP 800-53 Rev 5), Implement, Assess (SP 800-53A), Authorize, and Monitor continuously. Use when a system needs an ATO or a renewal, when working a FISMA/FedRAMP authorization package, when building or reviVotes: 0GitHub stars: 2
- Cyber Executing Active Directory Attack SimulationExecutes authorized attack simulations against Active Directory environments to identify misconfigurations, weak credentials, dangerous privilege paths, and exploitable trust relationships that could lead to domain compromise. The tester uses BloodHound for attack path analysis, Mimikatz for credential extraction, and Impacket for protocol-level attacks including Kerberoasting, AS-REP Roasting, anVotes: 0GitHub stars: 2
- Cyber Detecting Broken Object Property Level AuthorizationDetect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.Votes: 0GitHub stars: 2
- Cyber Detecting Bluetooth Low Energy AttacksDetects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration abuse, and Man-in-the-Middle interception. Uses Ubertooth One and nRF52840 sniffers for packet capture, the bleak Python library for GATT service enumeration, and crackle for BLE encryption cracking. Use when assessing IoT device BLE security, monitoring for BLE-based attacks on wiVotes: 0GitHub stars: 2
- Cyber Detecting Aws Credential Exposure With TrufflehogDetecting exposed AWS credentials in source code repositories, CI/CD pipelines, and configuration files using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.Votes: 0GitHub stars: 2
- Cyber Detecting Attacks On Historian ServersDetect cyber attacks targeting OT historian servers (OSIsoft PI, Ignition, Wonderware) that sit at the IT/OT boundary and serve as pivot points for lateral movement between enterprise and control networks, including data manipulation, unauthorized queries, and exploitation of historian-specific vulnerabilities.Votes: 0GitHub stars: 2
- Cyber Detecting Api Enumeration AttacksDetect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.Votes: 0GitHub stars: 2
- Cyber Configuring Windows Event Logging For DetectionConfigures Windows Event Logging with advanced audit policies to generate high-fidelity security events for threat detection and forensic investigation. Use when enabling audit policies for logon events, process creation, privilege use, and object access to feed SIEM detection rules. Activates for requests involving Windows audit policy, event log configuration, security logging, or detection-orieVotes: 0GitHub stars: 2
- Cyber Configuring Windows Defender Advanced SettingsConfigures Microsoft Defender for Endpoint (MDE) advanced protection settings including attack surface reduction rules, controlled folder access, network protection, and exploit protection. Use when hardening Windows endpoints beyond default Defender settings, deploying enterprise-grade endpoint protection, or meeting compliance requirements for advanced malware defense. Activates for requests invVotes: 0GitHub stars: 2
- Cyber Configuring Tls 1 3 For Secure CommunicationsTLS 1.3 (RFC 8446) is the latest version of the Transport Layer Security protocol, providing significant improvements over TLS 1.2 in both security and performance. It reduces handshake latency to 1-RVotes: 0GitHub stars: 2
- Cyber Configuring Oauth2 Authorization FlowConfigure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, tokenVotes: 0GitHub stars: 2
- Cyber Configuring Ldap Security HardeningHarden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding, and channel binding bypass. Covers LDAPS enforcement, channel binding, LDAP siVotes: 0GitHub stars: 2
- Cyber Conducting Social Engineering Penetration TestDesign and execute a social engineering penetration test including phishing, vishing, smishing, and physical pretexting campaigns to measure human security resilience and identify training gaps.Votes: 0GitHub stars: 2
- Cyber Conducting Network Penetration TestConducts comprehensive network penetration tests against authorized target environments by performing host discovery, port scanning, service enumeration, vulnerability identification, and controlled exploitation to assess the security posture of network infrastructure. The tester follows PTES methodology from reconnaissance through post-exploitation and reporting. Activates for requests involvingVotes: 0GitHub stars: 2
- Cyber Conducting Mobile App Penetration TestConducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities in data storage, network communication, authentication, cryptography, and platform-specific security controls. The tester performs static analysis of application binaries, dynamic analysis at runtime, and API security testing to evaluVotes: 0GitHub stars: 2
- Cyber Conducting Cyber Risk Assessment With Nist 800 30>- Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and predisposing conditions, determine likelihood and impact, compute risk, and communicate results as a prioritized risk register. Use when an organization needs an actual risk *assessment* (not a matuVotes: 0GitHub stars: 2
- Cyber Conducting Api Security TestingConducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The tester uses the OWASP API Security Top 10 as the testing framework, combining Burp Suite interception with Postman collections and custom scripts to test endpoint security at every privilege level. Activates for requests inVotes: 0GitHub stars: 2
- Cyber Collecting Threat Intelligence With MispMISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing, storing, and correlating Indicators of Compromise (IOCs) of targeted attacks, threatVotes: 0GitHub stars: 2
- Cyber Bypassing Authentication With Forced Browsing[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized security assessments.Votes: 0GitHub stars: 2
- Cyber Building Detection Rule With Splunk SplBuild effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.Votes: 0GitHub stars: 2
- Cyber Auditing Uefi Firmware With ChipsecUse Intel CHIPSEC to assess platform firmware configuration, SPI flash write protection, BIOS lock, SMM/SMRR, and Secure Boot variable state, dump SPI flash, and triage UEFI variables for firmware-level threats.Votes: 0GitHub stars: 2