Menu
Skills neste repositório
O SkillsMP coletou 1.001 skills de JohnNuwan/EVA_CORE. Abra uma skill para revisar a origem e os detalhes.
JohnNuwan/EVA_COREMostrando 40 de 1.001 skills coletadas.
Guide complet de fuzzing avancé d'API REST/GraphQL — structure-aware fuzzing, grammar-based fuzzing, differential fuzzing, ffuf methodologies, param mining, value tampering, status code analysis, et custom fuzzing scripts
Idioma do texto original: francês
Guide complet de hacking d'API REST — OWASP API Top 10, fuzzing, rate limiting bypass, IDOR, mass assignment, SSRF, injection
Idioma do texto original: francês
Guide complet d'exploitation de Mass Assignment (API3) et Broken Object Property Level Authorization (BOPLA) — hidden fields, extra properties, prototype pollution, parameter pollution, et contournement de DTO
Idioma do texto original: francês
Guide complet des attaques de pollution de paramètres API — HTTP Parameter Pollution (HPP), type confusion, array injection, charset attacks, content-type switching, Unicode normalization bypass, et mass assignment via paramètres
Idioma do texto original: francês
Techniques avancées de contournement de rate limiting — en-têtes IP, rotation de proxies, timing attacks, distributed brute force, GraphQL batching, burst smuggling, et contournement de WAF
Idioma do texto original: francês
Guide complet de découverte et d'exploitation d'API shadow — endpoints zombies, debug backdoors, versioning attacks, swagger/OpenAPI leaks, staging endpoints, admin panels, et API docs exposées
Idioma do texto original: francês
Guide complet d'exploitation des webhooks API — SSRF inbound via webhooks, exfiltration out-of-band, callback servers, blind SSRF, DNS exfiltration, webhook smuggling, et détournement de notification
Idioma do texto original: francês
Guide complet d'Autopsy et The Sleuth Kit (TSK) — analyse de disque, système de fichiers, ingestion de sources, modules, keyword search, timeline view, et automatisation CLI
Idioma do texto original: francês
Guide complet des certifications AWS liées à la sécurité — AWS Certified Security - Specialty, Solutions Architect, Cloud Practitioner, et parcours de certification AWS.
Idioma do texto original: francês
Guide complet des services de sécurité AWS — GuardDuty, Inspector, Macie, Detective, Firewall Manager, Network Firewall, Security Hub, Config, Artifact, et architecture défensive AWS
Idioma do texto original: francês
Guide complet des services de sécurité Azure — Microsoft Defender for Cloud, Sentinel, Azure Policy, Azure AD Identity Protection, Defender XDR, Azure Security Benchmark, Key Vault, Managed HSM, et architecture défensive Azure
Idioma do texto original: francês
BeEF (Browser Exploitation Framework) — hook navigateur, modules d'exploitation, reconnaissance client, phishing, tunneling, exfiltration, pivoting via navigateur, et scénarios d'attaque complets.
Idioma do texto original: francês
Bettercap — MITM framework, ARP spoofing, DNS spoofing, HTTP/HTTPS interception, credential harvesting, session hijacking, Beacon C2 detection, HID attacks, Bluetooth, WiFi, BLE, et modules avancés.
Idioma do texto original: francês
Binary Exploitation avancé — heap exploitation, format string, use-after-free, type confusion, kernel exploitation, et techniques d'exploitation CTF/monde réel
Idioma do texto original: francês
Guide complet de la cryptographie blockchain — Merkle Trees, BLS signatures, Schnorr, Account Abstraction, Threshold Signatures, zk-Rollups, MEV, et protocoles blockchain.
Idioma do texto original: francês
BloodHound — cartographie et analyse des relations Active Directory, collecteurs (SharpHound, AzureHound), requêtes Cypher personnalisées, attaque des chemins de privilèges, ACL abuse, ACE abusives, et optimisation des attaques AD.
Idioma do texto original: francês
Guide complet de pentest navigateur — DOM clobbering, Service Worker hijacking, extension exploitation, postMessage, sandbox escape, et Web API abuse
Idioma do texto original: francês
Buffer Overflow — exploitation de stack/heap/SEH, ROP chains, canary bypass, egg hunters et développement d'exploits Windows/Linux
Idioma do texto original: francês
Burp Suite Pro — proxy d'interception, scanner automatisé, Intruder avancé, Repeater, Sequencer, Decoder, Comparer, Extensions (BApp Store), workflows OWASP, et automatisation d'audit web.
Idioma do texto original: francês
Bypass AV/EDR — AMSI bypass, ETW patching, DLL sideloading, obfuscation, packing, shellcode encryption, and evasion de Windows Defender, CrowdStrike, SentinelOne
Idioma do texto original: inglês
C2 Frameworks — Cobalt Strike, Sliver, Havoc, Mythic, Nighthawk, Empire, redirection, CDN proxying, et infrastructure de command & control
Idioma do texto original: francês
Guide complet de la certification CEH (Certified Ethical Hacker) v13 AI d'EC-Council — contenu, modules, préparation, ressources, coûts, et conseils d'examen.
Idioma do texto original: francês
Méthodologie de préparation aux certifications cybersécurité — stratégie d'étude, techniques de mémorisation, planification, gestion du stress, et optimisation de l'apprentissage pour maximiser la réussite.
Idioma do texto original: francês
Roadmap des certifications cybersécurité — arbre décisionnel, parcours par rôle (pentester, SOC, management, cloud, OSINT, devsecops), progression débutant → expert, et tableaux comparatifs.
Idioma do texto original: francês
Certipy — exploitation ADCS (Active Directory Certificate Services), ESC1 à ESC8, forger des certificats, authentification par certificat, pass-the-certificate, Shadow Credentials, et attaques PKI.
Idioma do texto original: francês
Chisel — tunnel TCP/HTTP/WebSocket, SOCKS proxy, reverse port forwarding, single-binary client/server, traversée de firewall, HTTP over WebSocket, et scénarios de pivoting avancés.
Idioma do texto original: francês
Guide complet des attaques de pipeline CI/CD — GitHub Actions, GitLab CI, Jenkins, secret extraction, poisoned pipeline execution, Artifact poisoning, outils
Idioma do texto original: francês
Guide complet de la certification CISSP (Certified Information Systems Security Professional) d'ISC2 — 8 domaines, préparation, examen, ressources et conseils.
Idioma do texto original: francês
Guide complet des Cloud Access Security Brokers (CASB) — Microsoft Defender for Cloud Apps, Netskope, Palo Alto Prisma, CASB use cases, Shadow IT discovery, DLP cloud, threat detection SaaS, et bonnes pratiques CASB
Idioma do texto original: francês
Guide complet de la conformité et gouvernance cloud — SOC2, PCI-DSS, HIPAA, GDPR, FedRAMP, ISO 27001, AWS Organizations SCP, GCP Organization Policies, Azure Policy, compliance frameworks, audit logging, et reporting
Idioma do texto original: francês
Guide complet de sécurité des conteneurs cloud — EKS, GKE, AKS, image scanning, admission controllers, runtime security, CIS benchmarks, Pod Security Standards, network policies, secrets management
Idioma do texto original: Indeterminado
Guide complet du Cloud Security Posture Management (CSPM) — Prowler, ScoutSuite, Checkov, CloudSploit, Security Hub, et automatisation de la posture multi-cloud AWS/GCP/Azure
Idioma do texto original: francês
Guide complet de durcissement et défense cloud — CIS benchmarks, Security Score, hardening AWS/GCP/Azure, least privilege, network segmentation, encryption, logging, et monitoring
Idioma do texto original: francês
Guide complet de détection et réponse aux incidents cloud — GuardDuty, Security Hub, Security Command Center, Defender for Cloud, Sentinel, CloudTrail, Audit Logs, SIEM integration, forensic cloud, playbooks IR
Idioma do texto original: inglês
Guide complet de DevSecOps cloud — CI/CD pipeline security, IaC scanning (Terraform, CloudFormation, ARM), SAST/DAST, secret scanning, SBOM, supply chain security, et Shift Left
Idioma do texto original: inglês
Guide complet de sécurité financière cloud — cost anomalies, resource hijacking, crypto mining detection, budget alerts, orphan resources, license compliance, FinOps security, AWS Budgets, GCP quotas, Azure Cost Management
Idioma do texto original: Indeterminado
Guide complet de sécurité IAM multi-cloud — AWS IAM, GCP IAM, Azure RBAC/AD, politiques, rôles, fédération d'identité, moindre privilège, analyse des chemins de privesc, et durcissement
Idioma do texto original: francês
Guide complet de sécurité réseau multi-cloud — VPC, security groups, NACL, WAF, CDN, DDoS protection, PrivateLink, VPC peering, Cloud VPN, service mesh, Zero Trust network
Idioma do texto original: Indeterminado
Guide complet de pentest AWS — S3, IAM, Lambda, EC2, ECS, metadata service, privesc, outils et méthodologie
Idioma do texto original: Indeterminado
Guide complet de pentest GCP — Cloud Storage, IAM, Compute Engine, Cloud Functions, KMS, privesc, outils
Idioma do texto original: francês