12,194 skills found · Page 54 of 407
mukul975 / conducting-wireless-network-penetration-test'Conducts authorized wireless network penetration tests to assess the
mukul975 / configuring-microsegmentation-for-zero-trustConfigures microsegmentation policies to enforce least-privilege workload-to-workload
mukul975 / correlating-threat-campaigns'Correlates disparate security incidents, IOCs, and adversary behaviors
mukul975 / Electronic Funds Transfer: Wire TransferDeploys and monitors ransomware canary files using Python's watchdog library, placing decoy files mimicking high-value targets (financial records, credentials, database exports) where ransomware enumerates first, and alerting via email, Slack, or syslog on any read/modify/rename/delete.
mukul975 / designing-adversary-engagement-with-mitre-engagePlan, run, and measure an adversary engagement operation using the MITRE Engage framework so that deployed deception is driven by strategy instead of deployed ad hoc.
mukul975 / analyzing-memory-forensics-with-lime-and-volatility'Performs Linux memory acquisition using LiME (Linux Memory Extractor)
mukul975 / analyzing-threat-actor-ttps-with-mitre-navigator'Map advanced persistent threat (APT) group TTPs to the MITRE ATT&CK framework using the attackcti Python library to query STIX/TAXII data for group-technique associations, then generate ATT&CK Navigator layer files to visualize and compare defensive coverage against adversary profiles
mukul975 / attacking-oauth-with-device-code-phishingRun OAuth 2.0 device-code and illicit-consent phishing attacks against
mukul975 / analyzing-linux-kernel-rootkitsDetect kernel-level rootkits in Linux memory dumps using Volatility3
mukul975 / analyzing-malicious-url-with-urlscanURLScan.io is a free service for scanning and analyzing suspicious URLs.
mukul975 / analyzing-malware-persistence-with-autorunsUse Sysinternals Autoruns to systematically enumerate and analyze malware
mukul975 / analyzing-powershell-script-block-loggingParse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX
mukul975 / Phishing'Queries Certificate Transparency logs via crt.sh and pycrtsh to detect
mukul975 / analyzing-web-server-logs-for-intrusionParse Apache and Nginx access logs to detect SQL injection attempts,
mukul975 / analyzing-windows-prefetch-with-pythonParse Windows Prefetch (.pf) files with the windowsprefetch Python
mukul975 / conducting-pass-the-ticket-attackPerform Pass-the-Ticket (PtT) lateral movement by extracting Kerberos TGT/TGS tickets from LSASS memory on a compromised host and injecting them into another session to impersonate the ticket owner without knowing their password.
mukul975 / configuring-certificate-authority-with-opensslBuild a two-tier PKI Certificate Authority hierarchy (offline Root CA
mukul975 / configuring-hsm-for-key-storageConfigures Hardware Security Modules for cryptographic key storage
mukul975 / configuring-multi-factor-authentication-with-duoDeploys Cisco Duo multi-factor authentication across enterprise applications,
mukul975 / Steal Web Session CookieConfigures secure OAuth 2.0 authorization flows, including Authorization
mukul975 / analyzing-active-directory-acl-abuseDetect dangerous ACL misconfigurations in Active Directory using ldap3
mukul975 / analyzing-cobaltstrike-malleable-c2-profilesParse and analyze Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike (profiles and beacon-payload configs) and pyMalleableC2 (AST parsing) to extract HTTP/DNS transforms, URIs, headers, sleep/jitter, and injection behavior, then generate network detection signatures
mukul975 / analyzing-malicious-pdf-with-peepdfPerform static analysis of malicious PDF documents using peepdf, pdfid,
mukul975 / analyzing-network-packets-with-scapyUse Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets
mukul975 / analyzing-persistence-mechanisms-in-linuxScan Linux systems for persistence mechanisms including crontab/systemd entries, LD_PRELOAD injection, shell profile modifications (.bashrc, .profile), and SSH authorized_keys backdoors, then correlate findings with auditd logs into an installation timeline.
mukul975 / analyzing-powershell-empire-artifactsDetect PowerShell Empire post-exploitation framework artifacts in Windows Script Block Logging (Event ID 4104) and Module Logging (Event ID 4103), including the default launcher string, Base64-encoded WebClient/FromBase64String payloads, known module invocations (Invoke-Mimikatz, Invoke-Kerberoast),…
mukul975 / Transfer of fundsIdentify ransomware-related network indicators, including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange, by analyzing Zeek conn.log and NetFlow data
mukul975 / analyzing-cloud-storage-access-patternsDetect abnormal access in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics for after-hours bulk downloads, new-IP access, and API-call spikes (e.g. GetObject) via statistical baselines and time-series anomaly detection
mukul975 / analyzing-ethereum-smart-contract-vulnerabilitiesPerform static and symbolic analysis of Solidity smart contracts using
mukul975 / Create Fake Materials: Fake WebsiteImplement a phishing report button (Microsoft 365 built-in Report button
