Explore skills

This skill covers Bluetooth Low Energy (BLE) attack methodologies, including GATT enumeration, unauthorized characteristic read/write, pairing downgrades, LE Secure Connections bypass, MITM attacks, sniffing, encryption key extraction, and proximity authentication abuse.

This methodology details rogue access point construction using tools like hostapd-mana, wifiphisher, and airgeddon, employing KARMA/Mana probe responses, captive portal phishing, and deauth-driven client coercion. It also covers defeating MAC randomization, post-association MITM attacks (DNS, ARP, transparent proxy), and credential capture for portal/web/SMB.

This skill covers 802.11 attack methodologies for red team engagements and wireless security assessments, including monitor-mode setup, WPA/WPA2-PSK/WPA3 attacks, WPA-Enterprise (EAP) attacks, evil twin attacks, captive-portal phishing, KRACK, FragAttacks, and WPS Pi.

This Wi-Fi reconnaissance methodology covers adapter selection, monitor mode and packet injection setup, regulatory domain handling, multi-band airspace mapping, hidden SSID discovery, network fingerprinting, client analysis, and structured data capture for downstream attacks.

Attack methodology for Zigbee, Thread, and Matter mesh protocols, covering IEEE 802.15.4 sniffing, KillerBee toolkit usage, Touchlink commissioning abuse, replay/injection attacks, Zigbee Cluster Library command exploitation, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing.

Queries video analytics data and metrics from Elasticsearch via the VA-MCP server (port 9901). This skill is used for questions about incidents, alerts, sensor data, object counts, speeds, occupancy, or any recorded events and metrics.

Generates publication-quality figures for ML papers from research context. Given a paper section or description, extracts system components and relationships to generate architecture diagrams via Gemini. Given experiment results or data, auto-selects chart type and generates data-driven figures via matplotlib/seaborn. Use when creating any figure for a conference paper.

Scalable data processing for ML workloads. Streaming execution across CPU/GPU, supports Parquet/CSV/JSON/images. Integrates with Ray Train, PyTorch, TensorFlow. Scales from single machine to 100s of nodes. Use for batch inference, data preprocessing, multi-modal data loading, or distributed ETL pipelines.

A skill for hunting SQLi vulnerabilities, developed from 12 public bug bounty reports. It covers modern NoSQL injection, ORM raw-fragment SQLi, second-order SOQL injection, time-based blind SQLi in GraphQL resolvers, and SQLi on OIDC-p.

Hunting skill for GraphQL vulnerabilities, built from 12 public bug bounty reports covering various IDORs, SSRF, DoS, SQLi, broken authorization, and PII exposure. Use this skill when hunting GraphQL on any target.

Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. This tool handles creating new spreadsheets, reading/analyzing data, modifying existing ones while preserving formulas, and data visualization.

Open the Token Optimizer dashboard. Collects latest session data, regenerates the dashboard, and opens it in your browser.