← all publishers

jihedbfr-art

@jihedbfr-art source repo

Report this profile Claim this profile

• 260 skills
• 0 followers
• 12 hours ago last updated

1. ▌
   Excessive Data Exposure · jihedbfr-art bundle

   Use when an API returns more data than the client needs — testing whether responses leak fields the user shouldn't see, and how to filter at the server.
   0 installs
2. ▌
   Security Group Review · jihedbfr-art bundle

   Use when auditing cloud network exposure — finding security groups and firewall rules that open sensitive ports to the world, and tightening them to least access.
   0 installs
3. ▌
   Secrets At REST · jihedbfr-art bundle

   Use when protecting stored secrets and sensitive data at rest — envelope encryption and secret managers — so a database or disk breach doesn't hand over plaintext.
   0 installs
4. ▌
   Dns And Proxy Hunting · jihedbfr-art bundle

   Use when hunting DNS and web-proxy logs for C2, exfiltration, and malicious domains — high-value logs that reveal what hosts are really talking to.
   0 installs
5. ▌
   Misp And Sharing · jihedbfr-art bundle

   Use when running a threat-intel sharing platform and exchanging intelligence — using MISP and STIX/TAXII to manage, share, and consume intel with the wider community.
   0 installs
6. ▌
   Agent Tool Abuse · jihedbfr-art bundle

   Use when an LLM agent can call tools or take actions — testing whether it can be steered into misusing them, and the least-privilege and confirmation controls that bound the damage.
   0 installs
7. ▌
   Excessive Agency · jihedbfr-art bundle

   Use when an LLM system can take actions with real consequences — deciding how much autonomy, permission, and functionality it should have so a bad decision can't cause serious harm.
   0 installs
8. ▌
   Gap Analysis · jihedbfr-art bundle

   Use when measuring the distance between where your security is and where it needs to be — against a framework, a target state, or a requirement — and turning the gaps into a prioritised roadmap.
   0 installs
9. ▌
   Network Segmentation · jihedbfr-art bundle

   Use when designing or reviewing network segmentation — dividing a network so a foothold in one zone can't reach everything, and verifying the boundaries actually hold.
   0 installs
10. ▌
    Firewall Rule Review · jihedbfr-art bundle

    Use when auditing a firewall rule set for overly-permissive, shadowed, or stale rules — the accumulated cruft that quietly widens what's allowed through.
    0 installs
11. ▌
    Ssrf Testing · jihedbfr-art bundle

    Use when an app fetches a URL you can influence — testing whether you can make the server request internal services, cloud metadata, or arbitrary hosts, and the fix.
    0 installs
12. ▌
    Csrf Testing · jihedbfr-art bundle

    Use when testing whether an app performs state-changing actions without verifying intent — letting a malicious page act as a logged-in victim — and how to stop it.
    0 installs
13. ▌
    Ssti Testing · jihedbfr-art bundle

    Use when user input reaches a server-side template engine — testing for template injection that can escalate to remote code execution, and how to render untrusted data safely.
    0 installs
14. ▌
    Insecure Data Storage · jihedbfr-art bundle

    Use when checking how a mobile app stores data — finding the secrets, tokens, and PII left in readable local storage that anyone with the device (or a backup) can extract.
    0 installs
15. ▌
    Injection Patterns · jihedbfr-art bundle

    Use when reviewing code for the specific shapes that turn into SQLi, command, LDAP, or template injection — the concatenation and interpolation patterns worth stopping on.
    0 installs
16. ▌
    Ssh Hardening · jihedbfr-art bundle

    Use when securing SSH access to Linux hosts — key-based auth, disabling weak options, and cutting the exposure of the most-attacked service on the internet.
    0 installs
17. ▌
    Password Hashing · jihedbfr-art bundle

    Use when choosing and tuning a password hash — Argon2, scrypt, or bcrypt with parameters that stay expensive to crack — so a stolen database yields little.
    0 installs
18. ▌
    Ransomware Response · jihedbfr-art bundle

    Use when responding to a ransomware incident — the specific playbook for containment, the pay/don't-pay reality, recovery from backups, and what makes it different from other incidents.
    0 installs
19. ▌
    Ml Model Security · jihedbfr-art bundle

    Use when securing traditional ML models (classifiers, detectors, recommenders) rather than LLMs — adversarial examples, model theft, and inference attacks, plus defences.
    0 installs
20. ▌
    Mitm And Arp Spoofing · jihedbfr-art bundle

    Use in a lab or authorised test to understand adversary-in-the-middle attacks on a local network — ARP spoofing and interception — and, crucially, the controls that stop them.
    0 installs
21. ▌
    Xxe Injection · jihedbfr-art bundle

    Use when an app parses XML you can influence — testing whether external entities let you read files, reach internal services, or cause DoS — and the parser hardening that stops it.
    0 installs
22. ▌
    Sudo Hardening · jihedbfr-art bundle

    Use when reviewing or writing sudoers configuration — granting elevated access without handing out shell escapes or effectively-root privileges by accident.
    0 installs
23. ▌
    Tls Configuration · jihedbfr-art bundle

    Use when configuring TLS on a server — protocol versions, cipher suites, and settings that score clean and stay usable — the config side of the network TLS-inspection check.
    0 installs
24. ▌
    Alert Enrichment · jihedbfr-art bundle

    Use when detections fire with too little context — adding asset, identity, and threat data automatically so analysts triage faster and with better decisions.
    0 installs
25. ▌
    Operationalising A Hunt · jihedbfr-art bundle

    Use when turning a hunt into lasting value — converting findings into detections, documenting the hunt, and feeding results back so the programme improves instead of repeating itself.
    0 installs
26. ▌
    Intel Requirements · jihedbfr-art bundle

    Use when defining what intelligence to collect — establishing intelligence requirements so the programme answers real questions instead of collecting everything and hoping.
    0 installs
27. ▌
    Blameless Postmortem · jihedbfr-art bundle

    Use after an incident is resolved to write a postmortem that finds the systemic causes and drives real fixes — without blaming individuals, so people stay honest.
    0 installs
28. ▌
    Model Dos And Cost · jihedbfr-art bundle

    Use when an LLM app could be driven to exhaust resources or run up a large bill through crafted inputs — testing for unbounded consumption and the limits that contain it.
    0 installs
29. ▌
    Iso 27001 Isms · jihedbfr-art bundle

    Use when standing up or running an ISO 27001 information security management system — building the risk-driven management framework, not just a binder of policies, and getting certified.
    0 installs
30. ▌
    Policy Writing · jihedbfr-art bundle

    Use when writing security policies people actually follow — clear, actionable, enforceable documents that drive behaviour, not shelfware written to satisfy an auditor.
    0 installs
31. ▌
    Google Dorking · jihedbfr-art bundle

    Use when searching for an organisation's exposed files, login panels, and sensitive pages using search-engine operators — passive recon that finds what shouldn't be indexed.
    0 installs
32. ▌
    Network Access Control · jihedbfr-art bundle

    Use when controlling which devices are allowed onto the network — 802.1X and NAC — so an unauthorised device can't just plug in and join, and posture is checked before access.
    0 installs
33. ▌
    Android Static Analysis · jihedbfr-art bundle

    Use when you have an Android APK and want to read it for secrets, weak configuration, and vulnerable code without running it — the first pass on any mobile assessment.
    0 installs
34. ▌
    Deep Link And Ipc Abuse · jihedbfr-art bundle

    Use when testing a mobile app's inter-process communication surface — deep links, URL schemes, intents, and exported components that other apps (or the web) can invoke maliciously.
    0 installs
35. ▌
    Play Appstore Hardening · jihedbfr-art bundle

    Use when hardening a mobile app for release — the ship-side controls, store security requirements, and configuration that reduce risk before and after publishing to the app stores.
    0 installs
36. ▌
    Iam Privilege Escalation · jihedbfr-art bundle

    Use when you have limited cloud credentials and need to check whether IAM misconfigurations let you reach higher privileges — mapping escalation paths and closing them.
    0 installs
37. ▌
    Cloud Credential Hygiene · jihedbfr-art bundle

    Use when reviewing how cloud credentials are created, stored, scoped, and rotated — stopping the long-lived leaked key that's behind most cloud breaches.
    0 installs
38. ▌
    Multi Account Guardrails · jihedbfr-art bundle

    Use when structuring cloud across multiple accounts — using organization-wide guardrails (SCPs, landing zones) to enforce security that no single account can override.
    0 installs
39. ▌
    Metadata Service Attacks · jihedbfr-art bundle

    Use when assessing whether SSRF or a foothold can reach a cloud instance metadata service to steal credentials — and how IMDSv2 and network controls stop it.
    0 installs
40. ▌
    Crypto Misuse Review · jihedbfr-art bundle

    Use when reviewing code that encrypts, hashes, signs, or generates randomness — finding weak algorithms, misused primitives, and hand-rolled crypto before they ship.
    0 installs
41. ▌
    Suid Sgid Audit · jihedbfr-art bundle

    Use when auditing a Linux host for SUID/SGID binaries — files that run with their owner's privileges — to find the ones that hand a low-priv user a path to root.
    0 installs
42. ▌
    Detection As Code · jihedbfr-art bundle

    Use when managing detections like software — version control, testing, and CI/CD for detection rules so they're reviewed, tested, and deployed reliably instead of edited in a console.
    0 installs
43. ▌
    Mapping To Attack · jihedbfr-art bundle

    Use when tying detections to the MITRE ATT&CK framework — mapping each rule to a technique so you can measure coverage, find gaps, and prioritise what to build next.
    0 installs
44. ▌
    Detection Metrics · jihedbfr-art bundle

    Use when measuring the quality of a detection programme — the metrics that show whether detections work and where to improve, instead of vanity counts of how many rules exist.
    0 installs
45. ▌
    Lateral Movement Hunting · jihedbfr-art bundle

    Use when hunting for an attacker moving between hosts — the authentication patterns, remote-execution, and access anomalies that reveal lateral movement across the network.
    0 installs
46. ▌
    The Pyramid Of Pain · jihedbfr-art bundle

    Use when deciding which indicators to prioritise — a model for valuing intelligence by how much it costs the attacker to change, so you invest in detections that actually hurt them.
    0 installs
47. ▌
    Dark Web Monitoring · jihedbfr-art bundle

    Use when monitoring criminal forums, marketplaces, and leak sites for threats to your organisation — exposed credentials, data leaks, and chatter — done legally and safely.
    0 installs
48. ▌
    Evidence Preservation · jihedbfr-art bundle

    Use during an incident to capture volatile and persistent evidence in the right order, without contaminating it — so the investigation (and any legal case) holds up.
    0 installs
49. ▌
    Risk Assessment · jihedbfr-art bundle

    Use when you need to identify, score, and prioritise security risks in a way people actually act on — turning "this feels dangerous" into a ranked, defensible register.
    0 installs
50. ▌
    Soc 2 Readiness · jihedbfr-art bundle

    Use when preparing for a SOC 2 audit — understanding the Trust Services Criteria, Type I vs Type II, and getting the controls and evidence in place to pass without last-minute panic.
    0 installs
51. ▌
    Control Mapping · jihedbfr-art bundle

    Use when an organisation faces multiple frameworks — mapping one control set to many frameworks so you implement a control once and satisfy several requirements instead of duplicating work.
    0 installs
52. ▌
    Packet Capture Analysis · jihedbfr-art bundle

    Use when you need to read what's actually on the wire — capturing and analysing traffic with tcpdump and Wireshark to investigate an incident, confirm a finding, or debug.
    0 installs
53. ▌
    Dast In Cicd · jihedbfr-art bundle

    Use when running dynamic application security testing in the pipeline — scanning a running application for vulnerabilities automatically, and where DAST fits versus SAST.
    0 installs
54. ▌
    Iac Scanning · jihedbfr-art bundle

    Use when scanning infrastructure-as-code for misconfigurations before deploy — catching the insecure Terraform/CloudFormation/Kubernetes settings that become cloud breaches.
    0 installs
55. ▌
    Auth And Authz Review · jihedbfr-art bundle

    Use when reviewing access-control logic — reading authn/authz code for the gaps that let a request act as someone it isn't, or reach something it shouldn't.
    0 installs
56. ▌
    Selinux Apparmor · jihedbfr-art bundle

    Use when applying mandatory access control on Linux — keeping SELinux or AppArmor enforcing (not disabled) so a compromised process is confined to what it's meant to do.
    0 installs
57. ▌
    Cvss In Context · jihedbfr-art bundle

    Use when prioritising a backlog of vulnerabilities — adjusting raw CVSS base scores with environmental and exploitability context so you fix what actually matters first.
    0 installs
58. ▌
    Asset Inventory · jihedbfr-art bundle

    Use when building the asset inventory that vulnerability management depends on — because you can't scan, prioritise, or protect what you don't know you have.
    0 installs
59. ▌
    Bec Detection · jihedbfr-art bundle

    Use when defending against business email compromise — the high-value fraud where an attacker impersonates an executive or vendor to redirect payments, and why it evades normal filters.
    0 installs
60. ▌
    Testing Detections · jihedbfr-art bundle

    Use when validating that a detection actually works — running the technique it targets to confirm it fires, and checking it stays quiet on benign activity, before trusting it.
    0 installs