SkillsAdd

Source

briiirussell/cybersecurity-skills

29 skills · 7.2K combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
owasp-audit Audit application source code against the OWASP Top 10 (2021) vulnerability categories — broken access control, crypt…
briiirussell/cybersecurity-skills
371
2
web-pentest Perform black-box / grey-box web application penetration testing on an authorized target — auth bypass, IDOR, session…
briiirussell/cybersecurity-skills
325
3
dependency-audit Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-p…
briiirussell/cybersecurity-skills
306
4
api-audit Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023).
briiirussell/cybersecurity-skills
303
5
secrets-audit Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-manageme…
briiirussell/cybersecurity-skills
292
6
osint-recon Gather and correlate open source intelligence from public sources for authorized investigations, threat intelligence,…
briiirussell/cybersecurity-skills
268
7
mobile-audit Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pi…
briiirussell/cybersecurity-skills
267
8
recon Perform structured reconnaissance and attack surface enumeration for authorized penetration tests, CTF challenges, an…
briiirussell/cybersecurity-skills
263
9
threat-modeling Run a structured threat-modeling session for a new feature, system, or architecture — STRIDE, attack trees, data flow…
briiirussell/cybersecurity-skills
257
10
prompt-injection Audit applications for AI prompt injection, agent security, and LLM permission boundary vulnerabilities.
briiirussell/cybersecurity-skills
252
11
incident-triage Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology.
briiirussell/cybersecurity-skills
243
12
disk-forensics Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and C…
briiirussell/cybersecurity-skills
242
13
crypto-audit Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verific…
briiirussell/cybersecurity-skills
237
14
cloud-audit Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps. Use whe…
briiirussell/cybersecurity-skills
236
15
privacy-engineering Implement and audit privacy controls in product and infrastructure — GDPR, CCPA / CPRA, LGPD, PIPEDA. Covers data min…
briiirussell/cybersecurity-skills
235
16
iam-audit Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers …
briiirussell/cybersecurity-skills
232
17
finding-triage Triage a single security finding — from a scanner, audit, advisory, or report — to a defensible disposition with a mi…
briiirussell/cybersecurity-skills
231
18
vuln-research Research a specific CVE or vulnerability disclosure end-to-end — what version is affected, is your code reachable, is…
briiirussell/cybersecurity-skills
230
19
container-audit Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed se…
briiirussell/cybersecurity-skills
223
20
red-team-engagement Plan, scope, and execute an authorized red-team engagement — distinct from a penetration test. Covers engagement meth…
briiirussell/cybersecurity-skills
223
21
threat-hunting Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an a…
briiirussell/cybersecurity-skills
221
22
siem-detection Engineer and audit SIEM detection rules — log source coverage, Sigma / KQL / SPL / Elastic query authoring, MITRE ATT…
briiirussell/cybersecurity-skills
220
23
breach-patterns Learn from public breach disclosures — extract the audit question each one implies and check your own stack. Capital …
briiirussell/cybersecurity-skills
216
24
csf-mapping Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, R…
briiirussell/cybersecurity-skills
212
25
pci-audit Audit applications and infrastructure handling payment card data against PCI DSS v4.0. Heavy emphasis on scope determ…
briiirussell/cybersecurity-skills
212
26
security-comms Translate technical security work into the language of non-security audiences — board, executives, engineering, custo…
briiirussell/cybersecurity-skills
212
27
soc-operations Build, run, and improve a Security Operations Center — alert prioritization, runbook authoring, escalation criteria, …
briiirussell/cybersecurity-skills
211
28
hipaa-audit Audit applications and infrastructure handling Protected Health Information against HIPAA — Security Rule (administra…
briiirussell/cybersecurity-skills
207
29
ai-risk-management Apply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems — model lifecycle g…
briiirussell/cybersecurity-skills
206