10,231 skills found ¡ Page 309 of 342
hypnguyen1209 / browser-exploitationUse when building a client-side browser exploit â V8/JSC JIT type confusion to renderer R/W, V8 heap-sandbox escape, renderer-to-browser sandbox escape (Mojo IPC, GPU/Dawn/ANGLE), Electron/webview IPC abuse, 1-click RCE chains
hypnguyen1209 / cicd-supply-chainUse when attacking or auditing a CI/CD pipeline or software supply chain â pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance
hypnguyen1209 / cloud-securityUse when attacking AWS/Azure/GCP cloud â IAM/identity privilege escalation, IMDS/metadata SSRF, Entra device-code & PRT theft, GCP impersonation chains, Kubernetes/container escape, IaC/CI-CD federation abuse
hypnguyen1209 / container-k8s-escapeUse when breaking out of a container or escalating inside Kubernetes â runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivot
hypnguyen1209 / crypto-analysisUse when assessing cryptography â TLS/PKI auditing, RSA/ECC key attacks, ECDSA nonce lattice recovery, symmetric/AEAD misuse, JWT/JOSE forgery, hash cracking, post-quantum migration review
hypnguyen1209 / exploit-developmentUse when turning a memory-corruption bug into a working PoC â stack/ROP, glibc heap & FSOP, format strings, browser/JIT type confusion & UAF, Linux/Windows kernel LPE against ASLR/DEP/CFG/CET/V8-Sandbox
hypnguyen1209 / incident-responseUse when responding to or forensically investigating an incident â triage acquisition (Velociraptor/KAPE), Volatility 3 memory forensics, Chainsaw/Hayabusa EVTX timelining, anti-forensics detection, cloud IR, ransomware/ESXi response
hypnguyen1209 / malware-analysisUse when reverse-engineering or detecting malware â static triage + capa/YARA-X, emulation/DBI/.NET unpacking, dynamic/fileless/Volatility 3 memory analysis, C2 config extraction (Cobalt Strike/CAPE), C2 traffic detection (JA4+, beaconing)
hypnguyen1209 / mobile-pentestUse when pentesting an Android/iOS app â Frida 17 instrumentation, SSL-pinning & root/jailbreak bypass, Android 14/15 CA injection, exported-component/content-provider abuse, deep-link/WebView chains, biometric bypass, Flutter/React-Native RE
hypnguyen1209 / network-attackUse when attacking a network or moving laterally â L2/L3 poisoning (LLMNR/mDNS, ARP/DHCP, mitm6), coercion + NTLM relay (CVE-2025-33073), TUN pivoting (Ligolo-ng/Chisel), MitM, network-service RCE (CVE-2024-38077), WPA2/WPA3 wireless
hypnguyen1209 / privesc-linuxUse when escalating privileges on a Linux host â SUID/SGID & GTFOBins, sudo LPE (CVE-2025-32462/32463), capabilities & LD_PRELOAD, kernel LPE (CVE-2024-1086, Dirty Pipe, GameOver(lay)), service misconfig (PwnKit, Looney Tunables), container/namespace escape
hypnguyen1209 / privesc-windowsUse when escalating privileges on a Windows host â SeImpersonate Potato chains (GodPotato/PrintNotifyPotato), service & DLL hijacking, UAC bypass (fodhelper/ICMLuaUtil), kernel EoP + BYOVD (CVE-2025-29824), token-rights abuse, LSASS/SAM/DPAPI credential harvesting
hypnguyen1209 / recon-osintUse when mapping a target's external attack surface or gathering OSINT â subdomain enumeration, attack-surface mapping (httpx/katana/JS secrets), subdomain takeover, multi-cloud/Azure tenant recon, GitHub secret dorking, breach/infostealer credential intel, CVE prioritization (EPSS/KEV)
hypnguyen1209 / reverse-engineeringUse when reverse-engineering a binary or firmware â static triage + decompilation (Ghidra/IDA/Binary Ninja), dynamic instrumentation (GDB/Frida 17/angr), anti-reversing & packer bypass, OLLVM/VM deobfuscation, UEFI/BIOS RE & Secure Boot research, patch-diffing for n-days
hypnguyen1209 / threat-huntingUse when hunting threats or engineering detections â ATT&CK Detection-Strategies, Sigma + correlation with Detection-as-Code CI, Windows endpoint hunting (Sysmon/ETW/LSASS/LOLBins), network C2 hunting (JA4+, beaconing, DNS tunneling), cloud-identity hunting, Atomic Red Team purple-team validation
hypnguyen1209 / vulnerability-analysisUse when auditing source code for vulnerabilities â drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks
hypnguyen1209 / web-pentestUse when pentesting a web application or API â injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, SSTI/prototype-pollution/deserialization, JWT/OAuth/GraphQL/IDOR, business logic & single-packet race
hypnguyen1209 / windows-mitigations-bypassUse when bypassing a Windows exploit/platform mitigation â ASLR/DEP/CFG/XFG/CET, ACG/CIG, WDAC/App Control, ASR/AMSI/ETW, PPL/LSA Protection, BYOVD/VBS/HVCI
hypnguyen1209 / wireless-rfUse when the target has a non-Wi-Fi radio attack surface â Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth), Zigbee/Thread/Matter & Z-Wave mesh (Touchlink, S0 downgrade), LoRaWAN/Sub-GHz LPWAN, SDR capture/replay/rolljam, smart locks/medical/IoT radios.
hypnguyen1209 / windows-boundariesUse when crossing a Windows security boundary or escaping a sandbox â kernel/user crossing (win32k/dxgkrnl UAF CVE-2025-24983), BYOVD kernel R/W, UAC/COM elevation, AppContainer/LPAC & Chromium-Mojo sandbox escape (CVE-2025-2783), PPL bypass, RPC/ALPC & named-pipe impersonation
hypnguyen1209 / engagement-memoryUse when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report â cross-engagement pattern memory ranked by impact
hypnguyen1209 / threat-model-disciplineUse when starting an engagement, before exploitation, or whenever the attack surface changes â build/validate the threat model and detect drift (new unreviewed surface) before advancing
hypnguyen1209 / engagement-flowUse when starting, planning, or running a multi-phase pentest or red-team engagement â to sequence the Cyber Kill Chain phases with quality gates instead of jumping straight to exploitation
AThevon / compose-graphicsAdvanced Compose visuals - Material 3 Expressive motion physics, AGSL shaders (Android 13+), Canvas/DrawScope generative, graphicsLayer effects.
AThevon / compose-motionJetpack Compose animation foundations - animate*AsState, AnimatedVisibility, Crossfade, updateTransition, SharedTransitionLayout, gestures.
AThevon / compose-multiplatformCompose Multiplatform / KMP patterns - expect/actual composables, platform-specific code, density and font handling cross-target, iOS/Android/Desktop interop.
AThevon / desktop-principlesDesktop-specific UX principles - hover states, pointer precision, keyboard shortcuts, multi-window, focus management. Covers macOS, Windows, Linux, web desktop.
AThevon / swiftui-graphicsAdvanced SwiftUI visuals - Metal shaders (.colorEffect, .layerEffect, .distortionEffect), .visualEffect, Liquid Glass (iOS 26), Canvas, holographic and CRT effects.
AThevon / swiftui-motionSwiftUI animation foundations - withAnimation, transitions, matchedGeometryEffect, PhaseAnimator, KeyframeAnimator, springs, gestures.
AThevon / ui-ux-pro-maxUI/UX design-system intelligence - 84 styles, 192 palettes, 74 font pairings, 25 charts, 99 UX guidelines across 22 stacks (searchable dataset + CLI). Internal genjutsu module: loaded by /genjutsu:cast and /genjutsu:paint, not invoked directly.
