← all publishers

jihedbfr-art

@jihedbfr-art source repo

Report this profile Claim this profile

• 260 skills
• 0 followers
• 13 hours ago last updated

1. ▌
   Session Management · jihedbfr-art bundle

   Use when reviewing how an app issues, protects, and ends sessions — cookie flags, fixation, rotation, timeout — and the settings that make sessions safe.
   0 installs
2. ▌
   File Permissions And Acls · jihedbfr-art bundle

   Use when reviewing Linux file and directory permissions — the world-writable files, exposed sensitive files, and misused ACLs that lead to tampering or privilege escalation.
   0 installs
3. ▌
   Choosing The Right Primitive · jihedbfr-art bundle

   Use when you need to pick a cryptographic primitive for a task — hashing, encryption, signing, password storage — and want the safe modern default instead of a broken one.
   0 installs
4. ▌
   Triage And Deduplication · jihedbfr-art bundle

   Use when turning raw scanner output into an actionable backlog — deduplicating, filtering false positives, and grouping findings so teams fix root causes, not thousands of tickets.
   0 installs
5. ▌
   Remediation Verification · jihedbfr-art bundle

   Use when confirming a vulnerability is actually fixed — not just that a patch was deployed or a ticket closed — so "remediated" reflects reality and findings don't silently reopen.
   0 installs
6. ▌
   C2 Frameworks · jihedbfr-art bundle

   Use when operating command-and-control in an authorised engagement — how C2 frameworks work, using them within scope, and how the blue team detects C2 traffic and beaconing.
   0 installs
7. ▌
   Network Policies · jihedbfr-art bundle

   Use when segmenting pod-to-pod traffic in Kubernetes — applying network policies to default-deny east-west traffic so a compromised pod can't reach everything in the cluster.
   0 installs
8. ▌
   Typosquat Detection · jihedbfr-art bundle

   Use when defending against typosquatted and malicious lookalike packages — catching the malicious package with a name close to a popular one before a typo pulls it into your build.
   0 installs
9. ▌
   Gpo Security · jihedbfr-art bundle

   Use when assessing Group Policy as both an attack surface and a defensive tool — finding GPOs that can be abused to push code across the domain, and using them to enforce hardening.
   0 installs
10. ▌
    Linux Privilege Escalation · jihedbfr-art bundle

    Use when you have a low-privilege shell on a Linux host and need to enumerate the ways up to root — SUID, sudo, cron, capabilities — and how to close each.
    0 installs
11. ▌
    Reporting To Stakeholders · jihedbfr-art bundle

    Use when reporting vulnerability-management status to different audiences — metrics that drive action and decisions, not vanity numbers that impress nobody and change nothing.
    0 installs
12. ▌
    Purple Teaming · jihedbfr-art bundle

    Use when running red and blue collaboratively — red executes techniques while blue watches and tunes detection in real time, so the engagement directly improves defensive coverage.
    0 installs
13. ▌
    Phishing Email Analysis · jihedbfr-art bundle

    Use when a suspicious email needs analysing — reading headers, links, and attachments to decide if it's phishing and what to do about it, safely.
    0 installs
14. ▌
    Alert Triage Workflow · jihedbfr-art bundle

    Use when working a SOC alert queue — a repeatable path from raw alert to verdict (false positive, benign, or escalate) that stays consistent across analysts and shifts.
    0 installs
15. ▌
    Email And Credential Leaks · jihedbfr-art bundle

    Use when checking whether an organisation's email accounts and passwords have appeared in known data breaches — mapping exposure without ever using the credentials.
    0 installs
16. ▌
    Admission Control · jihedbfr-art bundle

    Use when enforcing security policy at deploy time in Kubernetes — admission controllers (OPA/Kyverno) that reject non-compliant resources before they run, gating the cluster.
    0 installs
17. ▌
    Dependency Confusion · jihedbfr-art bundle

    Use when protecting against dependency confusion attacks — where an attacker publishes a public package matching your internal package name and your build pulls theirs instead.
    0 installs
18. ▌
    Rbac And Abac Design · jihedbfr-art bundle

    Use when designing an authorization model — choosing between role-based and attribute-based access control, and structuring permissions that stay correct as the system grows.
    0 installs
19. ▌
    Kerberoasting · jihedbfr-art bundle

    Use when you have any domain user and want to crack service-account passwords via their Kerberos service tickets — and how to make the attack yield nothing.
    0 installs
20. ▌
    Kernel And Sysctl Hardening · jihedbfr-art bundle

    Use when hardening the Linux kernel via sysctl and boot settings — the network and memory-protection tunables that reduce exploitability and blunt common attacks.
    0 installs
21. ▌
    Symmetric Encryption Correctly · jihedbfr-art bundle

    Use when encrypting data with a symmetric cipher — using AEAD, handling nonces and keys correctly, and avoiding the mode and reuse mistakes that silently break confidentiality.
    0 installs
22. ▌
    On Call And Escalation · jihedbfr-art bundle

    Use when setting up SOC on-call and escalation — the runbooks, tiers, and handoffs that make sure serious alerts reach the right person fast and nothing falls through at 3am.
    0 installs
23. ▌
    Log Retention And Cost · jihedbfr-art bundle

    Use when balancing log retention against SIEM cost — keeping the data you need for detection, hunting, and compliance without paying premium ingest for everything.
    0 installs
24. ▌
    Enrichment And Context · jihedbfr-art bundle

    Use when wiring asset, identity, and threat context into the SOC's data so every alert and query carries the context analysts need — the operational backbone behind fast triage.
    0 installs
25. ▌
    Third Party Risk Management · jihedbfr-art bundle

    Use when running a vendor/third-party risk programme — assessing and monitoring the security of the vendors and suppliers whose access and services become your risk.
    0 installs
26. ▌
    File Upload Vulnerabilities · jihedbfr-art bundle

    Use when an app accepts file uploads — testing whether the upload can lead to code execution, stored XSS, or overwrite, and how to build a safe upload.
    0 installs
27. ▌
    Epss And Exploit Likelihood · jihedbfr-art bundle

    Use when prioritising vulnerabilities by how likely they are to be exploited — using EPSS and exploit-availability signals instead of severity alone.
    0 installs
28. ▌
    Lateral Movement · jihedbfr-art bundle

    Use when emulating lateral movement in an authorised engagement — how adversaries move between systems toward their objective, and how the blue team detects and constrains it.
    0 installs
29. ▌
    Package Repo Hardening · jihedbfr-art bundle

    Use when securing internal package registries — the repositories that serve your organisation's dependencies, so they can't be abused to distribute malicious or confused packages.
    0 installs
30. ▌
    Sso Integration Review · jihedbfr-art bundle

    Use when reviewing a single sign-on integration between an app and an identity provider — the trust-boundary mistakes that let an attacker impersonate users or bypass the IdP.
    0 installs
31. ▌
    As Rep Roasting · jihedbfr-art bundle

    Use when hunting for AD accounts that don't require Kerberos pre-authentication — crackable without any credentials — and how to remove the exposure.
    0 installs
32. ▌
    Dockerfile Hardening · jihedbfr-art bundle

    Use when writing or reviewing a Dockerfile for security — non-root users, minimal base images, no secrets in layers, and the build practices that shrink the attack surface.
    0 installs
33. ▌
    Delegation Abuse · jihedbfr-art bundle

    Use when testing Kerberos delegation configurations in AD — unconstrained, constrained, and resource-based — for the paths they open to impersonation and domain compromise, plus the fixes.
    0 installs
34. ▌
    Lsass Protection · jihedbfr-art bundle

    Use when hardening Windows hosts against credential theft from LSASS memory — Credential Guard, LSA protection, and the settings that make dumping tools come back empty.
    0 installs
35. ▌
    Tabletop Social Engineering · jihedbfr-art bundle

    Use when exercising the organisation's response to a social-engineering incident through a tabletop — walking through a realistic scenario to test people, process, and decisions before a real incident happens.
    0 installs
36. ▌
    Siem Use Case Development · jihedbfr-art bundle

    Use when developing SIEM use cases — the structured process of turning a security requirement into a deployed, documented detection with a response, not just a raw rule.
    0 installs
37. ▌
    Static Triage · jihedbfr-art bundle

    Use as the first analysis pass on a suspicious file — extracting strings, hashes, imports, and packing indicators without running it, to decide what it is and what to do next.
    0 installs
38. ▌
    Idor And Broken Access Control · jihedbfr-art bundle

    Use when testing whether a web app enforces access control server-side — horizontal and vertical privilege checks, function-level auth, and forced browsing — plus the fix.
    0 installs
39. ▌
    Kubernetes Rbac Audit · jihedbfr-art bundle

    Use when auditing Kubernetes RBAC for over-permissive roles and bindings — the excessive permissions that let a compromised workload or user take over the cluster.
    0 installs
40. ▌
    Secrets In Kubernetes · jihedbfr-art bundle

    Use when handling secrets in Kubernetes — stopping the plaintext, over-exposed secrets that leak credentials, and using proper secret management with encryption and access control.
    0 installs
41. ▌
    Security Metrics For Leadership · jihedbfr-art bundle

    Use when reporting security to executives and the board — translating technical security into business-risk terms and metrics that inform decisions and secure investment.
    0 installs
42. ▌
    Pod Security Standards · jihedbfr-art bundle

    Use when enforcing secure pod configurations in Kubernetes — the Pod Security Standards that stop privileged, host-accessing pods that lead to container escape and node compromise.
    0 installs
43. ▌
    Artifact Signing Sigstore · jihedbfr-art bundle

    Use when signing and verifying software artifacts with Sigstore/cosign — establishing that artifacts are genuine and unmodified, with keyless signing that removes key-management pain.
    0 installs
44. ▌
    Oauth2 Flows And Pitfalls · jihedbfr-art bundle

    Use when choosing or reviewing an OAuth2 flow — picking the right grant for the client type and avoiding the redirect, state, and PKCE mistakes that break it.
    0 installs
45. ▌
    Passwordless And Passkeys · jihedbfr-art bundle

    Use when implementing passwordless authentication with WebAuthn/passkeys — the phishing-resistant model, how it works, and the implementation details that make or break it.
    0 installs
46. ▌
    Tiered Admin Model · jihedbfr-art bundle

    Use when designing AD administration to break credential-theft attack paths — the tiered model that stops a phished laptop from becoming Domain Admin.
    0 installs
47. ▌
    Reporting And Retest · jihedbfr-art bundle

    Use when writing up a red-team engagement and verifying fixes — producing findings the organisation can actually close, and re-testing to confirm remediation worked.
    0 installs
48. ▌
    Phishing Simulation Programme · jihedbfr-art bundle

    Use when running authorised phishing simulations — testing and training users in a way that builds resilience and a reporting culture, not fear and resentment.
    0 installs
49. ▌
    Url And Attachment Detonation · jihedbfr-art bundle

    Use when safely analysing suspicious links and attachments — detonating them in isolation to determine if they're malicious without exposing yourself or the network.
    0 installs
50. ▌
    Extracting Iocs · jihedbfr-art bundle

    Use when turning malware analysis into indicators of compromise — the file, network, and host artifacts defenders use to detect and hunt the threat elsewhere.
    0 installs
51. ▌
    Training Data And Model Supply Chain · jihedbfr-art bundle

    Use when your app depends on models or datasets you didn't build — vetting them for poisoning, backdoors, and malicious serialization before you trust them in production.
    0 installs
52. ▌
    Supply Chain For Images · jihedbfr-art bundle

    Use when securing the container image supply chain — signing and verifying images so only trusted, unmodified images run, closing the gap between building and deploying.
    0 installs
53. ▌
    Secrets Scanning In Pipelines · jihedbfr-art bundle

    Use when you want to stop credentials from being committed or built into artifacts — wiring secret scanning into pre-commit and CI so leaks are caught before they ship.
    0 installs
54. ▌
    Malicious Package Response · jihedbfr-art bundle

    Use when a dependency you use turns out to be malicious or compromised — the response to a supply-chain incident where the threat is inside a package you already trusted and installed.
    0 installs
55. ▌
    Vishing And Smishing Awareness · jihedbfr-art bundle

    Use when defending against phone (vishing) and SMS (smishing) social engineering — the non-email channels attackers use to bypass email defences and pressure people directly.
    0 installs
56. ▌
    Unpacking Basics · jihedbfr-art bundle

    Use when a malware sample is packed or obfuscated — recognising packing and getting to the real payload so static and dynamic analysis can actually see the code.
    0 installs
57. ▌
    Container Image Scanning · jihedbfr-art bundle

    Use when you need to check a container image for known vulnerabilities, exposed secrets, and bad practice before it ships — and how to keep the results actionable.
    0 installs
58. ▌
    Container Escape Vectors · jihedbfr-art bundle

    Use when assessing how a compromised container could break out to the host — the privileged, host-mount, and capability misconfigurations that turn a container compromise into node compromise.
    0 installs
59. ▌
    Runtime Threat Detection · jihedbfr-art bundle

    Use when detecting malicious behaviour in running containers — the runtime monitoring that catches escapes, crypto-mining, and anomalous activity that build-time controls can't.
    0 installs
60. ▌
    Persistence Techniques · jihedbfr-art bundle

    Use when emulating persistence in an authorised engagement — how adversaries maintain access across reboots and remediation, and how defenders detect and hunt the footholds.
    0 installs
61. ▌
    Yara Rule Writing · jihedbfr-art bundle

    Use when writing YARA rules to detect malware families — signatures that catch a whole family or campaign, not just one sample, without false-positiving on benign files.
    0 installs
62. ▌
    Vulnerable Dependency Triage · jihedbfr-art bundle

    Use when triaging flagged vulnerable dependencies — telling exploitable from merely-present so you fix what actually matters instead of chasing every CVE in the dependency tree.
    0 installs
63. ▌
    Ad Hardening Baseline · jihedbfr-art bundle

    Use when you need a prioritised checklist of the Active Directory settings that shut most attack paths — the baseline that turns a soft domain into a hard target.
    0 installs
64. ▌
    JWT Attacks · jihedbfr-art bundle

    Use when an API authenticates with JSON Web Tokens — testing for algorithm confusion, none-alg, weak secrets, and unchecked claims, plus how to validate tokens correctly.
    0 installs
65. ▌
    Grpc Security · jihedbfr-art bundle

    Use when securing or testing a gRPC API — authentication, input validation, and the differences from REST that change how you attack and defend it.
    0 installs
66. ▌
    Mass Assignment · jihedbfr-art bundle

    Use when an API binds request data straight onto objects — testing whether you can set fields you shouldn't, like role or ownership, and how to bind safely.
    0 installs
67. ▌
    Cspm Baseline · jihedbfr-art bundle

    Use when setting up continuous cloud security posture monitoring — scanning cloud accounts against a baseline for misconfiguration, and keeping them from drifting back.
    0 installs
68. ▌
    Data Stacking · jihedbfr-art bundle

    Use when hunting with frequency analysis — stacking data to surface the rare outlier across a large dataset, one of the most reliable techniques for finding what doesn't belong.
    0 installs
69. ▌
    Vpn Security · jihedbfr-art bundle

    Use when assessing or hardening a VPN — IPsec or WireGuard configuration, authentication, and the exposure a remote-access gateway creates — so the tunnel doesn't become the way in.
    0 installs
70. ▌
    Dns Security · jihedbfr-art bundle

    Use when securing DNS infrastructure — DNSSEC, resolver filtering, and detecting tunnelling and exfiltration — because DNS is both a control point and an attacker's favourite covert channel.
    0 installs
71. ▌
    GRAPHQL Security · jihedbfr-art bundle

    Use when testing a GraphQL API — introspection exposure, query depth/complexity abuse, batching attacks, and authorization gaps unique to the graph model — plus the fixes.
    0 installs
72. ▌
    Webhook Security · jihedbfr-art bundle

    Use when building or reviewing webhook endpoints — verifying that inbound events are authentic and can't be forged, replayed, or used to attack your internal network.
    0 installs
73. ▌
    Tls Inspection · jihedbfr-art bundle

    Use when checking a service's TLS configuration on the wire — protocol versions, cipher suites, and certificate validity — to find weak crypto and misconfiguration.
    0 installs
74. ▌
    Ids Ips Tuning · jihedbfr-art bundle

    Use when deploying or tuning network intrusion detection/prevention — cutting false positives without going blind, and placing sensors where they actually see the traffic.
    0 installs
75. ▌
    Endpoint Hunting · jihedbfr-art bundle

    Use when hunting on endpoint telemetry — the process, persistence, and injection patterns that reveal compromise on hosts, using the richest data source available to a hunter.
    0 installs
76. ▌
    RAG Security · jihedbfr-art bundle

    Use when securing a retrieval-augmented generation system — stopping knowledge-base poisoning, cross-tenant leakage, and injection that rides in on retrieved documents.
    0 installs
77. ▌
    Anomaly Baselining · jihedbfr-art bundle

    Use when hunting requires knowing what normal looks like — establishing baselines of normal behaviour so anomalies stand out, the foundation most hunts depend on.
    0 installs
78. ▌
    Linux Artefacts · jihedbfr-art bundle

    Use when investigating a Linux host — the logs, shell history, cron, and filesystem artefacts that reveal what happened, where evidence lives differently than on Windows.
    0 installs
79. ▌
    Cloud Forensics · jihedbfr-art bundle

    Use when investigating in the cloud where there's no disk to image — reconstructing events from audit logs, snapshots, and provider APIs instead of traditional acquisition.
    0 installs
80. ▌
    Dns Recon · jihedbfr-art bundle

    Use when you want to pull records, zone data, and infrastructure hints out of a target's DNS alone — the quiet recon step before you touch a single host.
    0 installs
81. ▌
    Broken Authentication · jihedbfr-art bundle

    Use when testing how an API authenticates callers — token issuance, validation, expiry, and credential endpoints — for the flaws that let an attacker forge or steal identity.
    0 installs
82. ▌
    API Gateway Hardening · jihedbfr-art bundle

    Use when deciding where and how to enforce API security controls — using the gateway as the consistent choke point for auth, rate limits, and schema instead of per-service reinvention.
    0 installs
83. ▌
    Ssl Pinning Bypass · jihedbfr-art bundle

    Use in an authorised assessment to bypass certificate pinning so you can inspect a mobile app's TLS traffic — and understand what pinning does and doesn't protect.
    0 installs
84. ▌
    Mobile API Traffic · jihedbfr-art bundle

    Use when testing the backend a mobile app talks to — intercepting and testing the API, because the real attack surface is often the server, not the app on the device.
    0 installs
85. ▌
    Serverless Security · jihedbfr-art bundle

    Use when securing serverless functions (Lambda, Cloud Functions, Azure Functions) — over-privileged roles, event-data injection, and the risks that differ from securing servers.
    0 installs
86. ▌
    Secrets In Code · jihedbfr-art bundle

    Use when reviewing (or sweeping) a codebase for hardcoded credentials, keys, and tokens — finding them, judging severity, and handling the fact that git remembers.
    0 installs
87. ▌
    Race Conditions · jihedbfr-art bundle

    Use when reviewing code for TOCTOU and concurrency bugs with a security impact — the double-spend, the check that goes stale before the use, the shared state two requests corrupt.
    0 installs
88. ▌
    Hunting With Attack · jihedbfr-art bundle

    Use when using MITRE ATT&CK to structure and prioritise threat hunts — turning the framework into concrete, testable hunts instead of a poster on the wall.
    0 installs
89. ▌
    Beaconing Detection · jihedbfr-art bundle

    Use when hunting for command-and-control beaconing in network telemetry — the regular-interval callbacks that reveal C2 even when the destination and payload are unknown.
    0 installs
90. ▌
    Living Off The Land · jihedbfr-art bundle

    Use when hunting for attackers abusing legitimate built-in tools (LOLBins) — the PowerShell, WMI, and signed-binary abuse that blends in with normal admin activity.
    0 installs
91. ▌
    Actor Tracking · jihedbfr-art bundle

    Use when tracking a threat actor over time — attributing activity, following their evolving tradecraft, and turning "who and how" into defensive advantage.
    0 installs
92. ▌
    Memory Forensics · jihedbfr-art bundle

    Use when analysing a memory image to find what disk forensics misses — running processes, injected code, network connections, and secrets that only exist in RAM.
    0 installs
93. ▌
    Mobile Forensics · jihedbfr-art bundle

    Use when investigating a smartphone — the acquisition challenges, app data, and artefacts unique to iOS and Android, where the evidence is locked and encrypted differently than a PC.
    0 installs
94. ▌
    Chain Of Custody · jihedbfr-art bundle

    Use when handling digital evidence that might be challenged — documenting who had it, when, and why, so the evidence and your findings hold up legally and procedurally.
    0 installs
95. ▌
    IOS Static Analysis · jihedbfr-art bundle

    Use when you have an iOS app (IPA) and want to read it statically for secrets, weak configuration, and binary protection gaps — without running it.
    0 installs
96. ▌
    Key Management · jihedbfr-art bundle

    Use when managing cryptographic keys across their lifecycle — generation, storage, rotation, and destruction — because the key, not the algorithm, is where crypto usually fails.
    0 installs
97. ▌
    Crypto Agility · jihedbfr-art bundle

    Use when designing systems so cryptographic algorithms and keys can be changed later without a rewrite — because every algorithm eventually needs replacing.
    0 installs
98. ▌
    Windows Artefacts · jihedbfr-art bundle

    Use when investigating a Windows system — the registry, event logs, prefetch, and other artefacts that reveal what ran, when, and who did it.
    0 installs
99. ▌
    Timeline Analysis · jihedbfr-art bundle

    Use when reconstructing the sequence of an incident — building a super-timeline from all artefacts so events across sources line up chronologically and the story emerges.
    0 installs
100. ▌
     Xss Testing · jihedbfr-art bundle

     Use when checking whether a web app reflects or stores input that executes as script in a victim's browser — covers reflected, stored, and DOM XSS plus the output-encoding fix.
     0 installs