AeonDave/malskill - Page 4

uart-console

Identification, connection, and exploitation of UART serial consoles (U-Boot/Barebox interrupt, bootargs patching) during hardware assessments.

offensive-cloud-role

Scoped routing: cloud/SaaS/IAM operator for authorized assessments. Governs AWS/GCP/Azure exploration workflows.

offensive-forensic-role

Scoped routing: Forensic Operator. Extracting credentials and timelines from memory dumps, disk images, and PCAP.

offensive-hardware-role

Scoped routing: Hardware Operator. Physical device compromise via UART, JTAG, SPI, and embedded interfaces.

offensive-linux-role

Scoped routing: Linux Operator. Manages Unix host compromise, privilege escalation, and lateral movement.

offensive-mobile-role

Scoped routing: Mobile Operator. Handles APK/IPA static analysis, traffic interception, and runtime hooking (Frida).

offensive-osint-role

Scoped routing: OSINT Operator. Focuses on leaked credentials, identity mapping, social footprint, and threat intelligence.

offensive-recon-role

Scoped routing: Recon Operator. Handles active/passive asset mapping, port scanning, and attack surface discovery.

offensive-reverse-role

Scoped routing: Reverse Engineer. Static and dynamic analysis of binaries, malware, and unknown protocols.

offensive-web-role

Scoped routing: Web Operator. Handles API mapping, request replay, vulnerability validation, and OWASP-tier finding formulation.

offensive-windows-role

Scoped routing: Windows Operator. Handles AD enumeration, Kerberos exploitation, and Windows local privilege escalation.

linux-internals-dev

Auth/lab dev: Linux internals; ELF loader, procfs, namespaces/caps, eBPF verifier/maps, LSM hooks for tooling/telemetry design.

adaptixc2-dev

Auth/lab dev: AdaptixC2 extenders; agents, listeners, services, AxScript UI, configs, protocols, templates, build/validation workflows.

indirect-syscall-dev

Auth/lab dev: Windows syscall-dispatch research; SSN resolution, indirect gates, ntdll stubs, gadget scanning, stack-spoof integration.

sleep-masking-dev

Auth/lab dev: sleep-state research; timers/APC/waitable timers, memory-at-rest, permission transitions, key lifecycle, reliability checks.

stack-spoofing-dev

Auth/lab dev: Windows call-stack research; unwind metadata, synthetic frames, NtContinue, thread-pool traces, gadget constraints.

fcrackzip

Auth/lab ref: ZIP password-cracking utility for dictionary and brute-force testing. For you need a focused CLI workflow against password-protected ZIP archives before escalating to heavier cracking stacks.

hydra

Auth/lab ref: Online brute-force and password spraying tool supporting 50+ protocols (SSH, HTTP, FTP, SMB, RDP, WinRM, and more).

john

Auth/lab ref: CPU-based password cracker supporting hundreds of hash formats with wordlist, rules, and incremental modes.

name-that-hash

Auth/lab ref: hash-identification helper for narrowing candidate algorithms before cracking.

cyberchef

Auth/lab ref: Web-based data transformation and crypto analysis workbench. For rapidly decoding layered encodings, transforming binary/text formats, prototyping crypto/decode pipelines, or sharing reproducible recipes.

factordb

Auth/lab ref: public factorization database and simple JSON API for checking whether integers are prime, composite, or already factored.

openssl

Auth/lab ref: OpenSSL CLI for encryption, decryption, digesting, certificate inspection, and key handling.

rsactftool

Auth/lab ref: RSA testing automation tool for weak public keys. For targeting RSA key recovery or plaintext recovery from public data (n, e, ciphertext, partial leaks).

sagemath

Auth/lab ref: Computer algebra and number-theory environment for cryptanalysis scripting.

beef

Auth/lab ref: Browser Exploitation Framework - hook browsers via XSS/injected JS and perform client-side testing.

foundry-cast

Auth/lab ref: command-line utility for interacting with Ethereum-compatible chains.

metasploit

Auth/lab ref: Metasploit module reference; search/config/check, handler/session lab, msfconsole/msfvenom syntax, evidence capture.

pacu

Auth/lab ref: modular AWS exploitation framework for authorized cloud assessments.

searchsploit

Auth/lab ref: Offline CLI search tool for Exploit-DB.

solc

Auth/lab ref: Solidity compiler for generating ABI, bytecode, metadata, and standard-json outputs.

vuln-research

Auth/lab ref: Exploit research workflow: a target software version or CVE: triage CVSS severity, find public PoCs on NVD/sploitus/PoC-in-GitHub/ExploitDB, assess exploitability, and locate Metasploit modules.

autopsy

Auth/lab ref: GUI digital forensics platform built on The Sleuth Kit. For visually triage a disk image: open image, run ingest modules, search artifacts.

capa

Auth/lab ref: capa capability detection; executable/sandbox triage, MITRE/MBC mapping, behavior summary, static review prioritization.

chainsaw

Auth/lab ref: Fast DFIR triage for Windows forensic artifacts (EVTX, MFT, registry, ESE/SRUM) with Sigma and built-in detection logic.

evtxecmd

Auth/lab ref: Windows EVTX parsing and timeline extraction with EvtxECmd.

exiftool

Auth/lab ref: metadata extraction, copy, conversion, and editing utility for images, video, documents, archives, executables, and many other file types.

foremost

Auth/lab ref: file carving from disk images, raw media, and damaged data; headers/footers, recovery workflow, evidence handling.

ftk-imager

Auth/lab ref: forensic acquisition and image viewing tool for disk images, logical files, and memory.

mftecmd

Auth/lab ref: NTFS metadata triage with MFTECmd for $MFT/$J/$I30/$Boot artifacts.