Browse Skills

EDR Evasion provides an offensive checklist for hook unhooking, direct syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching, and memory encryption. Use it when planning EDR bypass during red team engagements or researching AV/EDR evasion techniques.

Exploit Development provides a structured course roadmap and syllabus for learning exploit development, covering fuzzing with AFL++ and FuzzTest, vulnerability classes, and advanced exploitation. Use it to structure training, track progress, or onboard new vulnerability researchers.

Kernel Exploit Mitigations catalogs modern OS security mitigations like ASLR, DEP/NX, RELRO, stack canaries, CFI, sandboxing, and seccomp, along with detection methods and known bypass techniques. Use it when assessing target hardening or planning exploit mitigation bypasses.

Keylogger Architecture documents low-level Windows keyboard input capture techniques, including SetWindowsHookEx and ETW-based hooks, and their IOCs. Use it when researching keyloggers, EDR evasion, or malware architecture analysis.

OAuth Security Testing applies an OAuth 2.0 attack checklist covering redirect_uri bypass, state parameter abuse, PKCE bypass, token leakage, and scope escalation when testing web apps or bug bounty.

Offensive Active Directory provides red team attack methodology for Active Directory, covering reconnaissance, credential abuse, privilege escalation, lateral movement, persistence, ADCS abuse, and Defender for Identity evasion. Use when assessing on-prem AD, hybrid AD/Entra ID, or ADCS deployments.

Offensive Fuzzing teaches a structured methodology for discovering vulnerabilities using coverage-guided fuzzing with AFL++ and libFuzzer. Use it when setting up fuzz campaigns, selecting harness strategies, or triaging fuzzer output.

Offensive Fuzzing covers fuzzer selection, harness writing, corpus curation, mutation strategies, coverage measurement, and crash triage for fuzz campaigns against file parsers, network protocols, kernel drivers, EDR engines, embedded firmware, or language runtimes.

Offensive JWT catalogs JWT attack techniques for penetration testers, covering algorithm confusion, weak secrets, header injection, and mobile token extraction. Use it when testing JWT-based authentication or evaluating JWT implementation security in web or mobile apps.

Offensive TOCTOU provides a methodology for exploiting time-of-check/time-of-use race conditions in filesystems, kernels, web applications, and containers. Use it when auditing privileged binaries, fuzzing for race conditions, or testing concurrency bugs in orchestrators.

Vulnerability Classes covers core memory corruption classes like stack/heap overflows, use-after-free, integer overflows, format strings, type confusion, and race conditions with real-world CVE case studies. Use when learning exploit development, researching vulnerability patterns, or teaching offensive security.

Offensive IoT provides a methodology for security testing IoT and embedded devices, covering hardware reconnaissance, firmware extraction, analysis, and exploitation. Use for pentests, smart-home assessments, ICS/OT testing, or embedded vulnerability research.