Security

Configures Fail2ban with custom filters and actions to detect port scanning activity, SSH brute force attempts, and network reconnaissance, automatically…

Use for SQL injection attacks and database exploitation.

Solve CTF Web Exploitation challenges by triaging HTTP behavior, source code, sessions, auth, injection, SSRF, file upload, template, deserialization, race…

Skill for reviewing Pull Requests from any GitHub repository using GitHub CLI (gh).

Run Google Lighthouse against a URL (mobile and desktop), trace the performance, accessibility, SEO, and best-practices findings to the project's actual…

Run a read-only, evidence-based audit of an LLM or agent application for prompt injection and the failures that make injection matter.

Exploit cloud environments (AWS, Azure, GCP) - misconfigured S3, IAM, metadata APIs

Exploit and extract data from databases (SQL injection, NoSQL injection, data exfiltration)

Escalate from user to root on Linux (SUID, capabilities, sudo, kernel exploits)

Hack Android/iOS apps (reverse engineering, API interception, bypass root detection)

Intercept, analyze, and manipulate network traffic (MITM, ARP spoofing, SSL stripping)

Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized…

Check what is actually live (store listing and labels, published policies, deployed backend, retention jobs) against the code and published words, then work…

Configure and troubleshoot the Hermes Gateway HTTP API server — enabling port 8642, setting API_SERVER_KEY, and connecting external tools (Studio, dashboards…

Audit and rewrite content to remove AI writing patterns ("AI-isms").

This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial…

Mod APKs for Android 16/ColorOS with APKTool 3.0.3+.

Hash cracking, encryption breaking, crypto analysis.

Android/iOS pentesting, APK reversing, Frida hooking.

Nmap, masscan, shodan, network reconnaissance.

Linux/Windows privesc, kernel exploits, SUID, sudo abuse.

Phishing, pretexting, vishing, credential harvesting.

Bypass WAF, IDS/IPS, AV, EDR, and application input filters

SQL injection, XSS, CSRF, LFI/RFI, command injection.