912 skills found · Page 5 of 31
mukul975 / continuous-llm-red-teaming-with-promptfooWires Promptfoo and DeepTeam into CI/CD for automated, repeatable red-teaming of LLM apps against OWASP LLM Top 10, OWASP Agentic, and MITRE ATLAS presets, failing the build when jailbreak or injection vulnerabilities regress.
mukul975 / deobfuscating-powershell-obfuscated-malwareSystematically deobfuscates multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
mukul975 / deploying-palo-alto-prisma-access-zero-trustDeploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, ZTNA Connectors, security policy enforcement, and Strata Cloud Manager integration for unified management
mukul975 / deploying-tailscale-for-zero-trust-vpnDeploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit nodes, subnet routers, and MagicDNS for encrypted peer-to-peer connectivity
mukul975 / detecting-ai-model-prompt-injection-attacksDetects prompt injection using regex signature matching, heuristic scoring for structural anomalies, and DeBERTa-based transformer classification, flagging direct injections (system-prompt overrides, role-play escapes) and indirect injections (encoded payloads, obfuscation) per OWASP LLM Top 10 (LLM…
mukul975 / detecting-anomalies-in-industrial-control-systemsDeploys anomaly detection for OT/ICS environments using machine learning on OT network baselines, physics-based process models, and Modbus/DNP3/OPC UA traffic analysis to flag deviations, rogue devices, and mismatches against historian data.
mukul975 / analyzing-bootkit-and-rootkit-samples'Analyzes bootkit and advanced rootkit malware infecting the Master
mukul975 / PhishingMonitor Certificate Transparency logs using crt.sh and Certstream to
mukul975 / analyzing-cobalt-strike-beacon-configurationExtract and analyze Cobalt Strike beacon configuration from PE files
mukul975 / analyzing-command-and-control-communication'Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom
mukul975 / analyzing-docker-container-forensicsInvestigate compromised Docker containers by analyzing images, layers,
mukul975 / Create Fake Materials: Fake WebsiteParse and analyze email headers (Received chain, Return-Path, Message-ID)
mukul975 / Transfer of funds'Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware,
mukul975 / analyzing-linux-system-artifactsExamine Linux system artifacts (auth logs, cron/systemd persistence,
mukul975 / analyzing-macro-malware-in-office-documents'Analyzes malicious VBA macros embedded in Microsoft Office documents
mukul975 / analyzing-pdf-malware-with-pdfid'Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to
mukul975 / Remote Access Tools'Analyzes encryption algorithms, key management, and file encryption
mukul975 / PhishingGenerate domain permutations with dnstwist and check DNS resolution
mukul975 / analyzing-uefi-bootkit-persistence'Analyzes UEFI bootkit persistence (SPI flash implants, ESP modifications,
mukul975 / analyzing-usb-device-connection-historyCorrelate Windows registry keys (USBSTOR, MountedDevices), Event Logs,
mukul975 / analyzing-windows-lnk-files-for-artifactsParse Windows LNK shortcut files to extract target paths, MAC timestamps,
mukul975 / assessing-vector-and-embedding-weaknessesTest RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector,
mukul975 / auditing-gcp-iam-permissions'Auditing Google Cloud Platform IAM permissions to identify overly permissive
mukul975 / Account Access Removal'Auditing Kubernetes cluster RBAC configurations to identify overly permissive
mukul975 / building-automated-malware-submission-pipeline'Builds an automated malware submission and analysis pipeline that collects
mukul975 / building-devsecops-pipeline-with-gitlab-ciConfigure a GitLab CI/CD pipeline that embeds SAST (Semgrep, SpotBugs, Gosec, Bandit, NodeJsScan), DAST, container scanning, dependency scanning, and secret detection via GitLab's managed security templates
mukul975 / building-ioc-defanging-and-sharing-pipelineBuild an automated pipeline that ingests raw IOCs (URLs, IPs, domains,
mukul975 / building-vulnerability-aging-and-sla-trackingImplement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g. 14 days critical, 30 days high, 60 days medium, 90 days low), with automated escalations and compliance metrics reporting
mukul975 / building-vulnerability-scanning-workflow'Builds a structured vulnerability scanning workflow using tools like
mukul975 / conducting-cloud-penetration-testing'This skill outlines methodologies for performing authorized penetration
