AeonDave/malskill - Página 3

osint-ctf

Lab/CTF: OSINT challenges; people/usernames/email, domains/infra, images/video/geolocation, DNS/archive/social/public records.

Idioma do texto original: inglês

reverse-ctf

Lab/CTF: reverse challenges; compiled binaries, bytecode, mobile/firmware, custom VMs, packed samples, anti-debug, validators.

Idioma do texto original: inglês

writeup-ctf

Lab/CTF: reproducible writeups; solved notes, command logs, artifacts, proof output, solver scripts, final reports, evidence checks.

Idioma do texto original: inglês

report-generation-technique

Assessment reporting: exec summaries, CVSS findings, evidence chains, MITRE ATT&CK mapping, remediation, review-ready structure.

Idioma do texto original: inglês

evidence-before-claims

Evidence gate for security research, scanner triage, code review, and reporting. Use before confirming vulnerability impact, auth material, control results, cleanup, or root cause.

Idioma do texto original: inglês

verification-before-completion

Use when about to claim work is done, fixed, passing, validated, merged, report-ready, or safe to proceed. Requires fresh verification evidence before success claims, commits, pull requests, task completion, operator reports, cleanup claims, or moving to the…

Idioma do texto original: inglês

cicd-technique

CI/CD supply chain methodology: identifying poisoned pipelines, unsafe GitHub Actions, and extracting build secrets.

Idioma do texto original: inglês

cloud-security-technique

Auth assessment: cloud security methodology; AWS/Azure/GCP IAM, storage, metadata, containers, serverless, workload identity, evidence routing.

Idioma do texto original: inglês

cracking-technique

Auth/lab: password/hash recovery methodology; hash triage, candidate design, rules/masks, campaign evidence, audit-safe reporting.

Idioma do texto original: inglês

fuzzing-technique

Auth/lab: fuzzing methodology; target model, oracle, harness quality, corpus, campaign triage for parsers, binaries, protocols, APIs.

Idioma do texto original: inglês

game-technique

Auth assessment: game security methodology; client integrity, anti-cheat, protocol replay, save formats, DRM/license checks, memory analysis.

Idioma do texto original: inglês

hardware-technique

Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.

Idioma do texto original: inglês

llm-technique

Auth assessment of LLM apps, RAG pipelines and agent/MCP systems: prompt injection, jailbreak taxonomy, indirect channels, tool poisoning, excessive agency, system-prompt leakage, embedding attacks, unbounded consumption. Maps to OWASP LLM Top 10 v2 (2025).

Idioma do texto original: inglês

mobile-technique

Auth assessment: mobile app security; Android/iOS static, storage, Frida/runtime, traffic, pinning, platform, API and crypto checks.

Idioma do texto original: inglês

osint-technique

Public-source research: target definition, source priority, identity/infra/breach/media/geospatial pivots, evidence synthesis.

Idioma do texto original: inglês

phishing-technique

Authorized simulation: email/social campaign infrastructure; domain hygiene, SPF/DKIM/DMARC, GoPhish/Evilginx planning, metrics.

Idioma do texto original: inglês

recon-technique

Auth assessment: recon methodology; passive collection, active probing, DNS/host/service mapping, priority surface, handoff evidence.

Idioma do texto original: inglês

social-engineering-technique

Authorized simulation: social-engineering methodology; pretexts, email/voice/physical exercises, target research, metrics, scope controls.

Idioma do texto original: inglês

source-review-technique

Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.

Idioma do texto original: inglês

vibe-audit-technique

White-box auditing methodology for AI-generated ('vibe-coded') applications from Lovable, Bolt.new, v0, Cursor, Replit Agent, and Claude Code. Focuses on modern stack misconfigurations (Supabase, Firebase, Next.js, Vercel, Expo).

Idioma do texto original: inglês

vuln-search-technique

Auth assessment: vulnerability discovery methodology; fingerprinting, CVE correlation, scanner orchestration, NSE/probes, fuzz/manual review.

Idioma do texto original: inglês

wireless-technique

Auth assessment: wireless methodology; Wi-Fi/BLE survey, WPA/WPA3 handshake/PMKID labs, WPS, rogue-AP simulation, auth-material handoff.

Idioma do texto original: inglês

windows-internals-dev

Auth/lab dev: Windows internals; PEB/TEB, PE/COFF, syscalls, unwinding, memory/heap, tokens, kernel objects, ETW/AMSI telemetry.

Idioma do texto original: inglês

offensive-supervisor-role

High-level orchestration role for authorized red-team, lab, and CTF engagements. Use to decompose objectives into strict delegable tasks, package cold-start context per dispatch, journal routing decisions, preserve multi-level worker failures, and gate the…

Idioma do texto original: inglês

gdb

Auth/lab ref: GDB with pwndbg/GEF for dynamic binary analysis, malware debugging, exploitability research, and reverse engineering on Linux/WSL.

Idioma do texto original: inglês

mimikatz

Auth/lab ref: Mimikatz secret-exposure audit; LSASS, DPAPI, Kerberos tickets/keys, token/ticket artifacts, Windows lab validation.

Idioma do texto original: inglês

rubeus

Auth/lab ref: Kerberos testing toolkit for TGT/TGS requests, AS-REP roasting, Kerberoasting, pass-the-ticket, overpass-the-hash, and S4U delegation misuse.

Idioma do texto original: inglês

crackmapexec

NetExec (formerly CrackMapExec): SMB, WinRM, and LDAP enumeration, password spraying, and file spidering across Active Directory.

Idioma do texto original: inglês

arduino

Build, review, debug, and scaffold professional Arduino projects across classic AVR boards (`Uno`, `Nano`, `Mega`), Renesas-based R4 boards (`Uno R4 Minima`, `Uno R4 WiFi`, `Nano R4`), ESP32-based Arduino boards, and other common Arduino-family targets. Use…

Idioma do texto original: inglês

can-bus-modules

CAN Bus interfacing for automotive/industrial networks using MCP2515 over SPI, baud rates, reading OBD-II frames.

Idioma do texto original: inglês

esp32

ESP32 programming: Wi-Fi/BLE integration, GPIO muxing, FreeRTOS tasks, and power management.

Idioma do texto original: inglês

gps-modules

GPS/GNSS module interfacing: UART baud rates, NMEA sentence parsing, and PPS timing synchronization.

Idioma do texto original: inglês

gsm-lte-modules

GSM, LTE, and NB-IoT module interfacing: SIM800/SIM7000 AT commands, logic shifting, and power constraints.

Idioma do texto original: inglês

lora-modules

LoRa and LoRaWAN SPI module interfacing (SX1276, SX1262), frequency band tuning, and radio libraries.

Idioma do texto original: inglês

raspberry-pi

Raspberry Pi hardware interfacing: GPIO, I2C, SPI, UART, and Python programming for SBC hardware.

Idioma do texto original: inglês

rfid-nfc-modules

RFID/NFC reading and writing: Mifare Classic, PN532 vs RC522, APDUs, and microcontroller SPI/I2C connections.

Idioma do texto original: inglês

sensors

Select, compare, and integrate sensors for Arduino, ESP32, robotics, model-making, and home automation with focus on signal quality, false positives, debounce, and practical wiring. Use when asked which sensor to choose, how to detect an event reliably, how…

Idioma do texto original: inglês

bof-dev

BOF (Beacon Object File) engineering for C and C++. DFR (Dynamic Function Resolution), linker limits, runtime safety, and COFF constraints.

Idioma do texto original: inglês

jtag-swd

Non-destructive JTAG/SWD pin identification, OpenOCD configuration, CPU halting, and runtime memory dumping.

Idioma do texto original: inglês

spi-flash

In-circuit and out-of-circuit SPI/NAND flash dumping and writing using flashrom and CH341A/FT232H.

Idioma do texto original: inglês