Database

Red team engagement methodology covering objective-based adversary simulation and stealth assessment for authorized operations

Web application penetration testing aligned with the OWASP Testing Guide for authorized security assessments

Wireless network penetration testing covering WPA/WPA2/WPA3 assessment and rogue access point detection for authorized engagements

ASN/IP range awareness, WHOIS lookups, and BGP route analysis for authorized security assessments

Asset discovery, DNS enumeration, and subdomain mapping for authorized security assessments

External attack surface mapping, forgotten asset detection, and domain drift analysis for authorized assessments

Certificate transparency analysis, SSL/TLS review, and cert chain validation for authorized assessments

Open source intelligence collection, data leak checks, and metadata extraction for authorized assessments

Service inventory and technology fingerprinting for authorized security assessments

Compliance framework alignment including CIS, NIST, ISO 27001, SOC 2, PCI DSS, and HIPAA

Executive summary writing and non-technical security communication

Clear vulnerability findings documentation with reproducible steps and evidence handling

Remediation mapping, fix prioritization, and timeline estimation

CVSS scoring, risk rating methodology, and business impact assessment

Change safety guardrails for security testing, do-not-touch asset protection, and rollback planning

Legal authorization verification, rules of engagement compliance, and regulatory awareness for security testing

Non-destructive vulnerability validation, proof-of-concept without exploitation, and safe evidence collection

Safe testing rate limits, resource-aware scanning, and production disruption avoidance

Scope enforcement for penetration testing, authorized target validation, and boundary compliance

Security awareness gap assessment, training effectiveness measurement, and human risk quantification

Helpdesk abuse path identification, pretexting scenarios, and identity verification bypass testing

Phishing simulation campaign planning, pretext development, payload design, and metrics collection

Physical security assessment, tailgating testing, badge cloning awareness, and facility access review

Business process weakness identification, verification flow testing, and social engineering attack path analysis

Build and measure security awareness programs with baseline assessments, simulated attacks, and behavior change metrics

Test MFA resilience through authorized adversary-in-the-middle, push fatigue, and recovery code exposure assessments

Design and execute authorized phishing simulation campaigns with GoPhish and King Phisher

Conduct authorized physical social engineering assessments including tailgating, impersonation, and USB drops

Develop and deploy pretexts for authorized social engineering engagements using structured methodology

Design and execute authorized SMS phishing simulations with proper consent and opt-out controls

Report social engineering assessment findings with metrics, human factor analysis, and executive-ready remediation plans

Execute targeted spear-phishing simulations for authorized red team engagements with OSINT-driven pretexts

Conduct authorized voice phishing assessments against helpdesks and personnel targets

Simulate watering hole attacks in controlled environments to test browser security and web filtering controls

Map adversary behaviors to ATT&CK, emulate tactics, and validate detection coverage

IOC collection, enrichment, scoring, lifecycle management, and sharing via STIX/TAXII

Static and behavioral malware triage, config extraction, family clustering, and sandbox analysis

Track threat actors, campaigns, infrastructure patterns, and targeting trends

Threat landscape analysis, trend reporting, and strategic risk forecasting

Authorization testing, privilege escalation, and IDOR detection for authorized security assessments

API auth flows, rate limiting, schema validation, and GraphQL security testing for authorized assessments

Authentication review, credential handling, and session management testing for authorized assessments

Business logic flaw detection, race conditions, and workflow bypass testing for authorized assessments

XSS, SQLi, command injection, and template injection testing for authorized security assessments

Use this skill when securing or reviewing a Next.js application. Activate when users mention next.js typescript security, App Router security, server actions, server components, middleware auth, NEXT_PUBLIC env leaks, SSRF in image optimization, CVE-2025 middleware bypass, route handler validation, or hardening a Vercel/self-hosted Next deployment.

Security headers, CORS, CSP, cookie flags, and TLS configuration review for authorized assessments

Bluetooth and BLE security assessment, pairing weakness analysis, sniffing, and device enumeration

Guest network isolation testing, captive portal bypass, and visitor network security assessment

Home and small business network security assessment, router posture, smart device review, and WFH security

IoT device exposure assessment, default credential testing, firmware review, and protocol analysis

Wi-Fi security configuration review, WPA enterprise testing, rogue AP detection, and wireless attack surface analysis

Monitor mentions of brands, domains, and employee emails across dark web sources

Ransomware leak-site monitoring, extortion workflow tracking, and victim notification

Onion service structure, abuse patterns, hosting indicators, and scam typologies

Study productized crime trends including access sales, stealer logs, and fraud services (research-only)

Detect credential leaks, stealer-log references, and breach monitoring for organizational accounts

Detect customer data mentions, PII exposure, and data dump analysis for breach assessment

Assess doxxing risk, credential reuse, and public digital footprint for high-risk individuals

Detect source code exposure, config dumps, and secret leaks in public repositories

Monitor for typosquat packages, dependency abuse, malicious updates, and fake repositories