Security

javimosch Skill

Use this skill when the user wants to find security issues in Python code, scan for vulnerabilities, check for unsafe imports, or audit Python security.

javimosch Skill

Use this skill when the user wants to check Python project dependencies for unused or missing packages, or audit dependency health.

javimosch Skill

Use this skill when the user wants to enumerate DNS information about a domain for security testing or reconnaissance.

javimosch Skill

Use this skill when the user wants to github actions workflow linter for security best practices.

javimosch Skill

Use this skill when the user wants to scan for security vulnerabilities, perform SAST analysis, or check code for security issues.

javimosch Skill

Linkerd service mesh CLI for observability and security.

javimosch Skill

Use this skill when the user wants to manage encrypted .env files, protect secrets in git repositories, or work with password-based secret vaults.

javimosch Skill

Secret scanner for git repositories

javimosch Skill

Use this skill when the user wants to check for outdated Rust dependencies, see available dependency updates, or audit crate versions.

javimosch Skill

Use this skill when the user wants to lint Dockerfiles for best practices, security, and portability issues.

javimosch Skill

Run crawl/analyze/report workflow with squirrelscan using supercli.

cyberstrikeus Skill

Testing for Self DOM-Based XSS

cyberstrikeus Skill

WSTG input validation and injection testing - SQLi, XSS, SSTI, SSRF, command injection, XXE

cyberstrikeus Skill

Cyber threat intelligence and other contextual information are integrated into the analysis

cyberstrikeus Skill

Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored througho

cyberstrikeus Skill

WSTG business logic, client-side, and API security testing

cyberstrikeus Skill

A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g.

cyberstrikeus Skill

Audit/log records are determined, documented, implemented, and reviewed in accordance with policy

cyberstrikeus Skill

Respond to findings from security and privacy assessments, monitoring, and audits in accordance with organizational risk tolerance.

cyberstrikeus Skill

The hardware, software (e.g., firmware, operating systems, applications), and services of physical and virtual platforms are managed consistent with t

cyberstrikeus Skill

Provide access from a single device to computing platforms, applications, or data residing in multiple different security domains, while preventing in

cyberstrikeus Skill

Mark system media indicating the distribution limitations, handling caveats, and applicable security markings (if any) of the information;

cyberstrikeus Skill

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

cyberstrikeus Skill

Establish and maintain a cyber threat hunting capability to: Search for indicators of compromise in organizational systems; and Detect, track, and dis

cyberstrikeus Skill

Adversaries with SYSTEM access to a host may attempt to access Local Security Authority (LSA) secrets, which can contain a variety of different credential materials, such as credentials for service...

cyberstrikeus Skill

Identify and document all security requirements for the organization’s software development infrastructures and processes, and maintain the requiremen

cyberstrikeus Skill

Identify and document all security requirements for organization-developed software to meet, and maintain the requirements over time.

cyberstrikeus Skill

Define criteria for software security checks and track throughout the SDLC.

cyberstrikeus Skill

Ensure that: Foreign nationals with appropriate security clearances are used to conduct maintenance and diagnostic activities on classified systems on

cyberstrikeus Skill

Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).

cyberstrikeus Skill

Adversaries may undermine security controls that will either warn users of untrusted activity or prevent execution of untrusted programs.

cyberstrikeus Skill

Adversaries may use a hidden file system to conceal malicious activity from users and security tools.

cyberstrikeus Skill

Security architectures are managed with the organization's risk strategy to protect asset confidentiality, integrity, and availability, and organizati

cyberstrikeus Skill

Use forms of risk modeling – such as threat modeling, attack modeling, or attack surface mapping – to help assess the security risk for the software.

cyberstrikeus Skill

Track and maintain the software’s security requirements, risks, and design decisions.

cyberstrikeus Skill

Where appropriate, build in support for using standardized security features and services (e.g., enabling software to integrate with existing log m...