110 skills found · Page 2 of 4
mukul975 / conducting-cloud-incident-responseRespond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit Logs), resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure
mukul975 / Create Fake Materials: Fake WebsiteDesign and execute a social engineering penetration test combining OSINT-driven target profiling with phishing, vishing, smishing, and physical pretexting campaigns using tools like GoPhish, the Social Engineer Toolkit (SET), and Evilginx to measure human security resilience
mukul975 / PhishingMonitor Certificate Transparency logs using crt.sh and Certstream to
mukul975 / assessing-vector-and-embedding-weaknessesTest RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector,
mukul975 / conducting-cloud-penetration-testing'This skill outlines methodologies for performing authorized penetration
mukul975 / analyzing-linux-audit-logs-for-intrusion'Uses the Linux Audit framework (auditd) with ausearch and aureport utilities
mukul975 / analyzing-network-traffic-with-wireshark'Captures and analyzes network packet data using Wireshark and tshark
mukul975 / attacking-entra-id-with-roadtoolsEnumerate Microsoft Entra ID (Azure AD) tenants with ROADrecon and
mukul975 / building-red-team-c2-infrastructure-with-havocDeploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB
mukul975 / Transfer of funds'Builds a structured SOC incident response playbook for ransomware attacks
mukul975 / bypassing-authentication-with-forced-browsingDiscovering and accessing unprotected pages, APIs, and administrative
mukul975 / conducting-man-in-the-middle-attack-simulation'Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap
mukul975 / conducting-network-penetration-test'Conducts comprehensive network penetration tests against authorized
mukul975 / analyzing-supply-chain-malware-artifactsInvestigate supply chain attack artifacts including trojanized software
mukul975 / building-c2-infrastructure-with-sliver-frameworkDeploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard), redirectors, domain fronting, and multi-operator support for authorized red-team operations
mukul975 / building-threat-hunt-hypothesis-frameworkBuild a systematic threat-hunt workflow that turns threat intelligence and ATT&CK gap analysis into testable hypotheses, then executes and validates them via EDR/SIEM queries (CrowdStrike, Defender, Splunk, Elastic, Sysmon, Velociraptor, Sigma) and documents findings in a standardized hunt report
mukul975 / conducting-cyber-risk-assessment-with-nist-800-30Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and predisposing conditions, determine likelihood and impact, compute risk, and communicate results as a…
mukul975 / conducting-domain-persistence-with-dcsyncPerform DCSync attacks by abusing MS-DRSR replication rights (DS-Replication-Get-Changes/-All) to impersonate a Domain Controller and extract KRBTGT, Domain Admin, and service account hashes for Golden Ticket forging, typically with Mimikatz.
mukul975 / Phone Number Spoofing: Official Phone Number SpoofingPlan and execute authorized vishing (voice phishing) pretext calls to
mukul975 / Account Takeover: Exposed Login CredentialRun a targeted spearphishing simulation for initial access by developing OSINT-derived pretexts, building payloads (HTML smuggling, macro docs, ISO/LNK, OneNote, QR codes), standing up look-alike-domain email infrastructure with SPF/DKIM/DMARC via GoPhish, and tracking results.
mukul975 / conducting-wireless-network-penetration-test'Conducts authorized wireless network penetration tests to assess the
mukul975 / attacking-oauth-with-device-code-phishingRun OAuth 2.0 device-code and illicit-consent phishing attacks against
mukul975 / Phishing'Queries Certificate Transparency logs via crt.sh and pycrtsh to detect
mukul975 / conducting-pass-the-ticket-attackPerform Pass-the-Ticket (PtT) lateral movement by extracting Kerberos TGT/TGS tickets from LSASS memory on a compromised host and injecting them into another session to impersonate the ticket owner without knowing their password.
mukul975 / analyzing-malicious-pdf-with-peepdfPerform static analysis of malicious PDF documents using peepdf, pdfid,
mukul975 / analyzing-network-packets-with-scapyUse Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets
mukul975 / analyzing-persistence-mechanisms-in-linuxScan Linux systems for persistence mechanisms including crontab/systemd entries, LD_PRELOAD injection, shell profile modifications (.bashrc, .profile), and SSH authorized_keys backdoors, then correlate findings with auditd logs into an installation timeline.
google / google-cloud-recipe-foundation-builderDeploys a baseline landing zone foundation for a Google Cloud Organization, establishing security guardrails using Organization Policies, resource hierarchy folders and projects, billing association, and centralized logging and monitoring.
google / gke-manifest-generationGenerates and updates secure, production-ready Kubernetes YAML manifests optimized for GKE Autopilot and GKE Standard clusters
google / assuredworkloads-frameworks-authorAuthors custom cloud controls and customized frameworks for Assured Workloads when built-in resources cannot satisfy core requirements
