AeonDave/malskill - الصفحة ٣

osint-ctf

Lab/CTF: OSINT challenges; people/usernames/email, domains/infra, images/video/geolocation, DNS/archive/social/public records.

لغة النص الأصلي: الإنجليزية

reverse-ctf

Lab/CTF: reverse challenges; compiled binaries, bytecode, mobile/firmware, custom VMs, packed samples, anti-debug, validators.

لغة النص الأصلي: الإنجليزية

writeup-ctf

Lab/CTF: reproducible writeups; solved notes, command logs, artifacts, proof output, solver scripts, final reports, evidence checks.

لغة النص الأصلي: الإنجليزية

report-generation-technique

Assessment reporting: exec summaries, CVSS findings, evidence chains, MITRE ATT&CK mapping, remediation, review-ready structure.

لغة النص الأصلي: الإنجليزية

evidence-before-claims

Evidence gate for security research, scanner triage, code review, and reporting. Use before confirming vulnerability impact, auth material, control results, cleanup, or root cause.

لغة النص الأصلي: الإنجليزية

verification-before-completion

Use when about to claim work is done, fixed, passing, validated, merged, report-ready, or safe to proceed. Requires fresh verification evidence before success claims, commits, pull requests, task completion, operator reports, cleanup claims, or moving to the…

لغة النص الأصلي: الإنجليزية

cicd-technique

CI/CD supply chain methodology: identifying poisoned pipelines, unsafe GitHub Actions, and extracting build secrets.

لغة النص الأصلي: الإنجليزية

cloud-security-technique

Auth assessment: cloud security methodology; AWS/Azure/GCP IAM, storage, metadata, containers, serverless, workload identity, evidence routing.

لغة النص الأصلي: الإنجليزية

cracking-technique

Auth/lab: password/hash recovery methodology; hash triage, candidate design, rules/masks, campaign evidence, audit-safe reporting.

لغة النص الأصلي: الإنجليزية

fuzzing-technique

Auth/lab: fuzzing methodology; target model, oracle, harness quality, corpus, campaign triage for parsers, binaries, protocols, APIs.

لغة النص الأصلي: الإنجليزية

game-technique

Auth assessment: game security methodology; client integrity, anti-cheat, protocol replay, save formats, DRM/license checks, memory analysis.

لغة النص الأصلي: الإنجليزية

hardware-technique

Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.

لغة النص الأصلي: الإنجليزية

llm-technique

Auth assessment of LLM apps, RAG pipelines and agent/MCP systems: prompt injection, jailbreak taxonomy, indirect channels, tool poisoning, excessive agency, system-prompt leakage, embedding attacks, unbounded consumption. Maps to OWASP LLM Top 10 v2 (2025).

لغة النص الأصلي: الإنجليزية

mobile-technique

Auth assessment: mobile app security; Android/iOS static, storage, Frida/runtime, traffic, pinning, platform, API and crypto checks.

لغة النص الأصلي: الإنجليزية

osint-technique

Public-source research: target definition, source priority, identity/infra/breach/media/geospatial pivots, evidence synthesis.

لغة النص الأصلي: الإنجليزية

phishing-technique

Authorized simulation: email/social campaign infrastructure; domain hygiene, SPF/DKIM/DMARC, GoPhish/Evilginx planning, metrics.

لغة النص الأصلي: الإنجليزية

recon-technique

Auth assessment: recon methodology; passive collection, active probing, DNS/host/service mapping, priority surface, handoff evidence.

لغة النص الأصلي: الإنجليزية

social-engineering-technique

Authorized simulation: social-engineering methodology; pretexts, email/voice/physical exercises, target research, metrics, scope controls.

لغة النص الأصلي: الإنجليزية

source-review-technique

Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.

لغة النص الأصلي: الإنجليزية

vibe-audit-technique

White-box auditing methodology for AI-generated ('vibe-coded') applications from Lovable, Bolt.new, v0, Cursor, Replit Agent, and Claude Code. Focuses on modern stack misconfigurations (Supabase, Firebase, Next.js, Vercel, Expo).

لغة النص الأصلي: الإنجليزية

vuln-search-technique

Auth assessment: vulnerability discovery methodology; fingerprinting, CVE correlation, scanner orchestration, NSE/probes, fuzz/manual review.

لغة النص الأصلي: الإنجليزية

wireless-technique

Auth assessment: wireless methodology; Wi-Fi/BLE survey, WPA/WPA3 handshake/PMKID labs, WPS, rogue-AP simulation, auth-material handoff.

لغة النص الأصلي: الإنجليزية

windows-internals-dev

Auth/lab dev: Windows internals; PEB/TEB, PE/COFF, syscalls, unwinding, memory/heap, tokens, kernel objects, ETW/AMSI telemetry.

لغة النص الأصلي: الإنجليزية

offensive-supervisor-role

High-level orchestration role for authorized red-team, lab, and CTF engagements. Use to decompose objectives into strict delegable tasks, package cold-start context per dispatch, journal routing decisions, preserve multi-level worker failures, and gate the…

لغة النص الأصلي: الإنجليزية

gdb

Auth/lab ref: GDB with pwndbg/GEF for dynamic binary analysis, malware debugging, exploitability research, and reverse engineering on Linux/WSL.

لغة النص الأصلي: الإنجليزية

mimikatz

Auth/lab ref: Mimikatz secret-exposure audit; LSASS, DPAPI, Kerberos tickets/keys, token/ticket artifacts, Windows lab validation.

لغة النص الأصلي: الإنجليزية

rubeus

Auth/lab ref: Kerberos testing toolkit for TGT/TGS requests, AS-REP roasting, Kerberoasting, pass-the-ticket, overpass-the-hash, and S4U delegation misuse.

لغة النص الأصلي: الإنجليزية

crackmapexec

NetExec (formerly CrackMapExec): SMB, WinRM, and LDAP enumeration, password spraying, and file spidering across Active Directory.

لغة النص الأصلي: الإنجليزية

arduino

Build, review, debug, and scaffold professional Arduino projects across classic AVR boards (`Uno`, `Nano`, `Mega`), Renesas-based R4 boards (`Uno R4 Minima`, `Uno R4 WiFi`, `Nano R4`), ESP32-based Arduino boards, and other common Arduino-family targets. Use…

لغة النص الأصلي: الإنجليزية

can-bus-modules

CAN Bus interfacing for automotive/industrial networks using MCP2515 over SPI, baud rates, reading OBD-II frames.

لغة النص الأصلي: الإنجليزية

esp32

ESP32 programming: Wi-Fi/BLE integration, GPIO muxing, FreeRTOS tasks, and power management.

لغة النص الأصلي: الإنجليزية

gps-modules

GPS/GNSS module interfacing: UART baud rates, NMEA sentence parsing, and PPS timing synchronization.

لغة النص الأصلي: الإنجليزية

gsm-lte-modules

GSM, LTE, and NB-IoT module interfacing: SIM800/SIM7000 AT commands, logic shifting, and power constraints.

لغة النص الأصلي: الإنجليزية

lora-modules

LoRa and LoRaWAN SPI module interfacing (SX1276, SX1262), frequency band tuning, and radio libraries.

لغة النص الأصلي: الإنجليزية

raspberry-pi

Raspberry Pi hardware interfacing: GPIO, I2C, SPI, UART, and Python programming for SBC hardware.

لغة النص الأصلي: الإنجليزية

rfid-nfc-modules

RFID/NFC reading and writing: Mifare Classic, PN532 vs RC522, APDUs, and microcontroller SPI/I2C connections.

لغة النص الأصلي: الإنجليزية

sensors

Select, compare, and integrate sensors for Arduino, ESP32, robotics, model-making, and home automation with focus on signal quality, false positives, debounce, and practical wiring. Use when asked which sensor to choose, how to detect an event reliably, how…

لغة النص الأصلي: الإنجليزية

bof-dev

BOF (Beacon Object File) engineering for C and C++. DFR (Dynamic Function Resolution), linker limits, runtime safety, and COFF constraints.

لغة النص الأصلي: الإنجليزية

jtag-swd

Non-destructive JTAG/SWD pin identification, OpenOCD configuration, CPU halting, and runtime memory dumping.

لغة النص الأصلي: الإنجليزية

spi-flash

In-circuit and out-of-circuit SPI/NAND flash dumping and writing using flashrom and CH341A/FT232H.

لغة النص الأصلي: الإنجليزية