trilwu/secskills

1

cracking-passwords Crack password hashes using hashcat/john, perform password spraying, brute force authentication, and execute pass-the…

trilwu/secskills

98

2

attacking-wireless-networks Attack WiFi networks using WPA/WPA2 cracking, WPS exploitation, Evil Twin attacks, deauthentication, and wireless rec…

trilwu/secskills

96

3

exploiting-web3-smart-contracts Audit and exploit smart contracts and Web3 applications including reentrancy, integer overflow, access control flaws,…

trilwu/secskills

96

4

performing-reconnaissance Perform OSINT, subdomain enumeration, port scanning, web reconnaissance, email harvesting, and cloud asset discovery …

trilwu/secskills

91

5

testing-web-applications Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file up…

trilwu/secskills

91

6

transferring-files Transfer files between systems using HTTP, SMB, FTP, netcat, base64 encoding, and living-off-the-land techniques for …

trilwu/secskills

80

7

testing-apis Test REST and GraphQL APIs for authentication bypasses, authorization flaws, IDOR, mass assignment, injection attacks…

trilwu/secskills

79

8

testing-mobile-applications Pentest Android and iOS mobile applications including APK analysis, dynamic analysis, SSL pinning bypass, root/jailbr…

trilwu/secskills

77

9

escalating-linux-privileges Escalate privileges on Linux systems using SUID/SGID binaries, capabilities, sudo misconfigurations, cron jobs, kerne…

trilwu/secskills

72

10

enumerating-network-services Enumerate and exploit network services including SMB, FTP, SSH, RDP, HTTP, databases (MySQL, MSSQL, PostgreSQL, Mongo…

trilwu/secskills

71

11

exploiting-cloud-platforms Exploit AWS, Azure, and GCP cloud misconfigurations including S3 buckets, IAM roles, metadata services, serverless fu…

trilwu/secskills

71

12

performing-social-engineering Conduct phishing campaigns, credential harvesting, pretexting, and social engineering attacks using tools like Gophis…

trilwu/secskills

69

13

attacking-active-directory Attack and enumerate Active Directory environments using Kerberos attacks (Kerberoasting, ASREPRoasting), credential …

trilwu/secskills

67

14

escalating-windows-privileges Escalate privileges on Windows systems using service misconfigurations, DLL hijacking, token manipulation, UAC bypass…

trilwu/secskills

67

15

establishing-persistence Establish persistence on Windows and Linux systems using registry keys, scheduled tasks, services, cron jobs, SSH key…

trilwu/secskills

67

16

exploiting-containers Escape Docker containers and exploit Kubernetes clusters using privileged containers, Docker socket access, misconfig…

trilwu/secskills

65

17

unpacking-protected-binaries Unpack and dump protected executables — UPX and commodity packers, custom crypters, commercial protectors like Themid…

trilwu/secskills

32

18

hunting-web-backdoors Hunt planted webshells and backdoors across a web source tree — PHP first (also JSP, ASP, Node) — triaging a director…

trilwu/secskills

31

19

analyzing-dotnet-assemblies Reverse engineer .NET assemblies and executables with dnSpyEx, ILSpy, and de4dot — identifying and unwrapping obfusca…

trilwu/secskills

25

20

analyzing-binaries Reverse engineer compiled binaries, firmware, and mobile app packages using triage, static disassembly, decompilation…

trilwu/secskills

24

21

reversing-unity-il2cpp Reverse engineer Unity games and apps built with IL2CPP or Mono, using Il2CppDumper, Il2CppInspector, and dnSpy. Use …

trilwu/secskills

24

22

analyzing-firmware-images Extract, analyze, and assess firmware images from embedded devices, IoT hardware, routers, and similar targets — file…

trilwu/secskills

23

23

analyzing-ios-binaries Analyze iOS applications at the binary level — decrypting FairPlay-protected IPAs with frida-ios-dump or bagbak, insp…

trilwu/secskills

23

24

analyzing-shellcode Analyze raw shellcode and position-independent code — extracting the bytes, guessing architecture, disassembling at t…

trilwu/secskills

23

25

exploiting-deserialization Identify and exploit insecure deserialization across Java, .NET, PHP, Python, and Ruby — recognizing serialized forma…

trilwu/secskills

23

26

orchestrating-vulnerability-research Run a sustained, multi-agent vulnerability-discovery campaign against a target — split its attack surface into slices…

trilwu/secskills

23

27

recognizing-deception Recognize defensive deception during an engagement — honeypots, honeytokens and canary tokens, decoy AD accounts and …

trilwu/secskills

23

28

analyzing-go-binaries Reverse engineer Go binaries by recovering function names and types from pclntab and moduledata using GoReSym, redres…

trilwu/secskills

22

29

analyzing-rust-binaries Reverse engineer Rust binaries — demangling legacy and v0 symbol schemes, recognizing monomorphized generics, Result …

trilwu/secskills

22

30

attacking-oauth-oidc Attack OAuth 2.0 and OpenID Connect flows — enumerate endpoints from the OIDC discovery document, break redirect_uri …

trilwu/secskills

22

31

auditing-code-for-vulnerabilities Audit source code for exploitable vulnerabilities using threat-model-driven review, taint tracing, invariant checking…

trilwu/secskills

22

32

auditing-php-applications Audit PHP web application source for critical vulnerabilities using PHP's specific sink and footgun catalog — object …

trilwu/secskills

22

33

exploiting-ssrf Find and exploit server-side request forgery — reaching cloud instance metadata on AWS IMDSv1/IMDSv2, Azure IMDS, and…

trilwu/secskills

22

34

maintaining-engagement-state Keep the durable record that outlives a session — credential provenance, access inventory, artifacts left on target f…

trilwu/secskills

22

35

mapping-attack-techniques Navigate security work by MITRE ATT&CK tactic and technique — resolve a technique ID or name to the right skill, map …

trilwu/secskills

22

36

reversing-flutter-apps Reverse engineer and intercept traffic from Flutter/Dart mobile apps using blutter, reFlutter, and Frida. Use when an…

trilwu/secskills

22

37

reversing-react-native-apps Reverse engineer React Native mobile apps, including Hermes bytecode bundles, using hbctool, hermes-dec, and Frida. U…

trilwu/secskills

22

38

abusing-ci-cd-oidc Exploit CI/CD pipeline misconfigurations and OIDC federation weaknesses across GitHub Actions, GitLab CI, and Jenkins…

trilwu/secskills

21

39

analyzing-disk-images Perform dead-disk forensics on an acquired disk image using The Sleuth Kit, Plaso, and bulk_extractor — verify integr…

trilwu/secskills

21

40

analyzing-malware Analyze suspected malware safely — containment, static triage, sandboxed detonation, unpacking, capability and C2 ext…

trilwu/secskills

21

41

analyzing-network-traffic Analyze packet captures and network telemetry for intrusion evidence — capture and handling, the Wireshark/tshark tri…

trilwu/secskills

21

42

attacking-graphql Test GraphQL APIs — introspection and schema recovery when introspection is disabled, field suggestion abuse, batchin…

trilwu/secskills

21

43

attacking-grpc-protobuf Test gRPC and Protocol Buffers services — recovering .proto definitions from server reflection or compiled descriptor…

trilwu/secskills

21

44

bypassing-mobile-pinning Diagnose and defeat TLS interception failures in mobile apps — certificate pinning, Android Network Security Config, …

trilwu/secskills

21

45

producing-threat-intelligence Produce cyber threat intelligence by pivoting on indicators to find related infrastructure, tracking actors and campa…

trilwu/secskills

21

46

reporting-security-findings Write security findings and assessment reports — severity scoring with CVSS and business impact, reproducible proof o…

trilwu/secskills

21

47

responding-to-incidents Run digital forensics and incident response — triage, evidence acquisition with chain of custody, host and cloud arti…

trilwu/secskills

21

48

reversing-obfuscated-javascript Reverse engineer minified, bundled, and obfuscated browser/Node JavaScript — unpacking webpack chunks, recovering sou…

trilwu/secskills

21

49

reviewing-code-changes Perform a security review of a diff, branch, or pull request — assessing what the change introduces, weakens, or expo…

trilwu/secskills

21

50

verifying-skill-accuracy Fact-check LLM-drafted technical content against primary sources — source hierarchy, programmatic existence probes fo…

trilwu/secskills

21