AeonDave/malskill - Página 3

osint-ctf

Lab/CTF: OSINT challenges; people/usernames/email, domains/infra, images/video/geolocation, DNS/archive/social/public records.

Idioma del texto original: inglés

reverse-ctf

Lab/CTF: reverse challenges; compiled binaries, bytecode, mobile/firmware, custom VMs, packed samples, anti-debug, validators.

Idioma del texto original: inglés

writeup-ctf

Lab/CTF: reproducible writeups; solved notes, command logs, artifacts, proof output, solver scripts, final reports, evidence checks.

Idioma del texto original: inglés

report-generation-technique

Assessment reporting: exec summaries, CVSS findings, evidence chains, MITRE ATT&CK mapping, remediation, review-ready structure.

Idioma del texto original: inglés

evidence-before-claims

Evidence gate for security research, scanner triage, code review, and reporting. Use before confirming vulnerability impact, auth material, control results, cleanup, or root cause.

Idioma del texto original: inglés

verification-before-completion

Use when about to claim work is done, fixed, passing, validated, merged, report-ready, or safe to proceed. Requires fresh verification evidence before success claims, commits, pull requests, task completion, operator reports, cleanup claims, or moving to the…

Idioma del texto original: inglés

cicd-technique

CI/CD supply chain methodology: identifying poisoned pipelines, unsafe GitHub Actions, and extracting build secrets.

Idioma del texto original: inglés

cloud-security-technique

Auth assessment: cloud security methodology; AWS/Azure/GCP IAM, storage, metadata, containers, serverless, workload identity, evidence routing.

Idioma del texto original: inglés

cracking-technique

Auth/lab: password/hash recovery methodology; hash triage, candidate design, rules/masks, campaign evidence, audit-safe reporting.

Idioma del texto original: inglés

fuzzing-technique

Auth/lab: fuzzing methodology; target model, oracle, harness quality, corpus, campaign triage for parsers, binaries, protocols, APIs.

Idioma del texto original: inglés

game-technique

Auth assessment: game security methodology; client integrity, anti-cheat, protocol replay, save formats, DRM/license checks, memory analysis.

Idioma del texto original: inglés

hardware-technique

Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.

Idioma del texto original: inglés

llm-technique

Auth assessment of LLM apps, RAG pipelines and agent/MCP systems: prompt injection, jailbreak taxonomy, indirect channels, tool poisoning, excessive agency, system-prompt leakage, embedding attacks, unbounded consumption. Maps to OWASP LLM Top 10 v2 (2025).

Idioma del texto original: inglés

mobile-technique

Auth assessment: mobile app security; Android/iOS static, storage, Frida/runtime, traffic, pinning, platform, API and crypto checks.

Idioma del texto original: inglés

osint-technique

Public-source research: target definition, source priority, identity/infra/breach/media/geospatial pivots, evidence synthesis.

Idioma del texto original: inglés

phishing-technique

Authorized simulation: email/social campaign infrastructure; domain hygiene, SPF/DKIM/DMARC, GoPhish/Evilginx planning, metrics.

Idioma del texto original: inglés

recon-technique

Auth assessment: recon methodology; passive collection, active probing, DNS/host/service mapping, priority surface, handoff evidence.

Idioma del texto original: inglés

social-engineering-technique

Authorized simulation: social-engineering methodology; pretexts, email/voice/physical exercises, target research, metrics, scope controls.

Idioma del texto original: inglés

source-review-technique

Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.

Idioma del texto original: inglés

vibe-audit-technique

White-box auditing methodology for AI-generated ('vibe-coded') applications from Lovable, Bolt.new, v0, Cursor, Replit Agent, and Claude Code. Focuses on modern stack misconfigurations (Supabase, Firebase, Next.js, Vercel, Expo).

Idioma del texto original: inglés

vuln-search-technique

Auth assessment: vulnerability discovery methodology; fingerprinting, CVE correlation, scanner orchestration, NSE/probes, fuzz/manual review.

Idioma del texto original: inglés

wireless-technique

Auth assessment: wireless methodology; Wi-Fi/BLE survey, WPA/WPA3 handshake/PMKID labs, WPS, rogue-AP simulation, auth-material handoff.

Idioma del texto original: inglés

windows-internals-dev

Auth/lab dev: Windows internals; PEB/TEB, PE/COFF, syscalls, unwinding, memory/heap, tokens, kernel objects, ETW/AMSI telemetry.

Idioma del texto original: inglés

offensive-supervisor-role

High-level orchestration role for authorized red-team, lab, and CTF engagements. Use to decompose objectives into strict delegable tasks, package cold-start context per dispatch, journal routing decisions, preserve multi-level worker failures, and gate the…

Idioma del texto original: inglés

gdb

Auth/lab ref: GDB with pwndbg/GEF for dynamic binary analysis, malware debugging, exploitability research, and reverse engineering on Linux/WSL.

Idioma del texto original: inglés

mimikatz

Auth/lab ref: Mimikatz secret-exposure audit; LSASS, DPAPI, Kerberos tickets/keys, token/ticket artifacts, Windows lab validation.

Idioma del texto original: inglés

rubeus

Auth/lab ref: Kerberos testing toolkit for TGT/TGS requests, AS-REP roasting, Kerberoasting, pass-the-ticket, overpass-the-hash, and S4U delegation misuse.

Idioma del texto original: inglés

crackmapexec

NetExec (formerly CrackMapExec): SMB, WinRM, and LDAP enumeration, password spraying, and file spidering across Active Directory.

Idioma del texto original: inglés

arduino

Build, review, debug, and scaffold professional Arduino projects across classic AVR boards (`Uno`, `Nano`, `Mega`), Renesas-based R4 boards (`Uno R4 Minima`, `Uno R4 WiFi`, `Nano R4`), ESP32-based Arduino boards, and other common Arduino-family targets. Use…

Idioma del texto original: inglés

can-bus-modules

CAN Bus interfacing for automotive/industrial networks using MCP2515 over SPI, baud rates, reading OBD-II frames.

Idioma del texto original: inglés

esp32

ESP32 programming: Wi-Fi/BLE integration, GPIO muxing, FreeRTOS tasks, and power management.

Idioma del texto original: inglés

gps-modules

GPS/GNSS module interfacing: UART baud rates, NMEA sentence parsing, and PPS timing synchronization.

Idioma del texto original: inglés

gsm-lte-modules

GSM, LTE, and NB-IoT module interfacing: SIM800/SIM7000 AT commands, logic shifting, and power constraints.

Idioma del texto original: inglés

lora-modules

LoRa and LoRaWAN SPI module interfacing (SX1276, SX1262), frequency band tuning, and radio libraries.

Idioma del texto original: inglés

raspberry-pi

Raspberry Pi hardware interfacing: GPIO, I2C, SPI, UART, and Python programming for SBC hardware.

Idioma del texto original: inglés

rfid-nfc-modules

RFID/NFC reading and writing: Mifare Classic, PN532 vs RC522, APDUs, and microcontroller SPI/I2C connections.

Idioma del texto original: inglés

sensors

Select, compare, and integrate sensors for Arduino, ESP32, robotics, model-making, and home automation with focus on signal quality, false positives, debounce, and practical wiring. Use when asked which sensor to choose, how to detect an event reliably, how…

Idioma del texto original: inglés

bof-dev

BOF (Beacon Object File) engineering for C and C++. DFR (Dynamic Function Resolution), linker limits, runtime safety, and COFF constraints.

Idioma del texto original: inglés

jtag-swd

Non-destructive JTAG/SWD pin identification, OpenOCD configuration, CPU halting, and runtime memory dumping.

Idioma del texto original: inglés

spi-flash

In-circuit and out-of-circuit SPI/NAND flash dumping and writing using flashrom and CH341A/FT232H.

Idioma del texto original: inglés