security-skill

Interactive gap analysis against Korea's ISMS-P 102-control certification framework (management, protection, personal information)

Security log analysis and anomaly detection for access, auth, and syslog files

Analyze suspicious files through triage/static/dynamic/code phases to produce IOCs, YARA/Sigma rules, and MITRE ATT&CK mappings

File hash reputation lookup via VirusTotal API v3 for MD5/SHA1/SHA256 detection ratio, threat classification, and vendor results

OWASP Top 10 (2021) checklist-based inspection and compliance matrix generation

Multi-chain smart contract security for Solana, Algorand, Cairo, Cosmos, Substrate, and TON with pre-audit readiness checks

Detect timing side-channel vulnerabilities in cryptographic code caused by secret-dependent branching and memory access patterns

Security-focused git diff analysis to detect regressions, new vulnerabilities, and unsafe changes in code reviews

Identify and classify state-changing entry points in smart contracts and applications to map the attack surface

Detect insecure default configurations including weak crypto, fail-open patterns, default credentials, and unsafe framework settings

Property-based fuzzing and testing to find security edge cases in crypto, smart contracts, and parsers across multiple languages

Verify code implementation matches security specifications, detecting deviations that could introduce vulnerabilities

Security testing methodology using fuzzers (AFL++, libFuzzer), sanitizers (ASan, MSan, UBSan), and static analysis for vulnerability discovery

Active Directory pentest with BloodHound attack path analysis, Kerberos/ADCS attacks, credential harvesting, and lateral movement

Guided bug bounty hunting session with recon, mapping, discovery, exploitation, and reporting phases with escalation routing

Pre-submission validation for bug bounty findings with scope/impact/exploitability gates, CVSS scoring, and submit/kill verdict

Certificate Transparency log search via crt.sh API to discover subdomains and certificates

Multi-cloud CSPM assessment using ScoutSuite/Prowler with IAM privilege escalation, storage exposure, and network posture for AWS/Azure/GCP

Detect CORS misconfiguration by testing various Origin headers and analyzing Access-Control responses

CVE detail lookup from NVD API v2 with CVSS scores, vectors, and affected products

Dependency vulnerability audit across Node.js, Python, and Go ecosystems

Assess CI/CD pipeline security maturity, identify DevSecOps gaps, and generate GitHub Actions/GitLab CI configs with security gates

DNS record reconnaissance and zone transfer attempts using dig, host, and nslookup

Encode/decode strings (Base64, URL, Hex, HTML, ROT13, JWT) for payload transformation, WAF bypass, and encoded data analysis

Escalate confirmed low/medium findings into high-impact exploit chains (A→B→C) with combined CVSS scoring

Identify hash algorithm type from a hash string and optionally verify against a known plaintext

LLM/AI application security testing for prompt injection, system prompt leakage, tool abuse, and output handling per OWASP AI Security Top 10

Mobile app security testing with Frida instrumentation, OWASP MASVS compliance, and SSL pinning/root detection bypass for Android/iOS

Nuclei template-based vulnerability scanning with severity filtering and structured output

Email-based OSINT collection including breach database checks and social account enumeration

Pentest report authoring with executive summary, CVSS-scored findings, attack narrative, and remediation roadmap (writing methodology)

Port scanning and service detection with nmap for authorized security assessments

Secret and credential detection in source code and git history using trufflehog or gitleaks

Security code review across input validation, auth, injection, crypto, error handling, dependencies, and concurrency with CWE mapping

Create and convert SIEM detection rules (Sigma/Splunk SPL/Elastic KQL/Sentinel KQL) from threat objectives, IOCs, or CVE reports

Subdomain enumeration using subfinder and amass to discover attack surface

Subdomain takeover detection and verification for dangling DNS records

Supply chain security audit with SCA scanning (trivy/grype), SLSA compliance assessment, and SBOM generation (CycloneDX/SPDX)

Structured threat modeling producing threat catalog with STRIDE categorization, DREAD risk scores, and prioritized mitigation roadmap

Detect the presence and type of a Web Application Firewall using wafw00f or manual fingerprinting