Universal Skills

Deploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit nodes, subnet routers, and MagicDNS for encrypted peer-to-peer connectivity

skillsecurityrust

mukul975 / detecting-ai-model-prompt-injection-attacks

Detects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer classification, flagging direct injections (system-prompt overrides, role-play escapes) and indirect injections (encoded payloads, obfuscation) per OWASP LLM Top 10 (LLM…

mukul975 / detecting-anomalies-in-industrial-control-systems

Deploys anomaly detection for OT/ICS environments using machine learning on OT network baselines, physics-based process models, and Modbus/DNP3/OPC UA traffic analysis to flag deviations, rogue devices, and mismatches against historian data.

mukul975 / analyzing-bootkit-and-rootkit-samples

'Analyzes bootkit and advanced rootkit malware infecting the Master

mukul975 / analyzing-cobalt-strike-beacon-configuration

Extract and analyze Cobalt Strike beacon configuration from PE files

mukul975 / analyzing-command-and-control-communication

'Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom

mukul975 / analyzing-docker-container-forensics

Investigate compromised Docker containers by analyzing images, layers,

skillgitdocker+2

mukul975 / Create Fake Materials: Fake Website

Parse and analyze email headers (Received chain, Return-Path, Message-ID)

mukul975 / Transfer of funds

'Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware,

mukul975 / analyzing-linux-system-artifacts

Examine Linux system artifacts (auth logs, cron/systemd persistence,

mukul975 / analyzing-macro-malware-in-office-documents

'Analyzes malicious VBA macros embedded in Microsoft Office documents

mukul975 / analyzing-pdf-malware-with-pdfid

'Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to

skillsecuritypdf

mukul975 / Remote Access Tools

'Analyzes encryption algorithms, key management, and file encryption

mukul975 / Phishing

Generate domain permutations with dnstwist and check DNS resolution

mukul975 / analyzing-uefi-bootkit-persistence

'Analyzes UEFI bootkit persistence (SPI flash implants, ESP modifications,

mukul975 / analyzing-usb-device-connection-history

Correlate Windows registry keys (USBSTOR, MountedDevices), Event Logs,

skillgitapi+1

mukul975 / analyzing-windows-lnk-files-for-artifacts

Parse Windows LNK shortcut files to extract target paths, MAC timestamps,

mukul975 / auditing-gcp-iam-permissions

'Auditing Google Cloud Platform IAM permissions to identify overly permissive

skillsecuritygcp

mukul975 / Account Access Removal

'Auditing Kubernetes cluster RBAC configurations to identify overly permissive

skillsecuritykubernetes

mukul975 / building-automated-malware-submission-pipeline

'Builds an automated malware submission and analysis pipeline that collects

skillautomationsecurity+1

mukul975 / building-devsecops-pipeline-with-gitlab-ci

Configure a GitLab CI/CD pipeline that embeds SAST (Semgrep, SpotBugs, Gosec, Bandit, NodeJsScan), DAST, container scanning, dependency scanning, and secret detection via GitLab's managed security templates

mukul975 / building-ioc-defanging-and-sharing-pipeline

Build an automated pipeline that ingests raw IOCs (URLs, IPs, domains,

mukul975 / building-vulnerability-aging-and-sla-tracking

Implement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g. 14 days critical, 30 days high, 60 days medium, 90 days low), with automated escalations and compliance metrics reporting

skilldesignsecurity

mukul975 / building-vulnerability-scanning-workflow

'Builds a structured vulnerability scanning workflow using tools like

mukul975 / conducting-external-reconnaissance-with-osint

Conduct external recon using OSINT techniques to map an organization's external attack surface without touching target systems, gathering DNS records, certificate transparency logs, search results, social media, code repositories, and breach databases into a target profile.

skilltestingsecurity+1

mukul975 / conducting-gdpr-compliance-assessment

Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis validation, data subject rights implementation, Data Protection Impact Assessments (DPIAs) under Article 35, breach noti…

skill

mukul975 / conducting-malware-incident-response

Respond to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing containment, analysis, eradication, and recovery procedures aligned to MITRE ATT&CK