jperezduerto

@jperezduerto source repo

76 skills
0 followers
8 hours ago last updated

▌
Cewl · jperezduerto
Build, extend, and operate CeWL — a custom wordlist generator that spiders websites and extracts unique words for use in password attacks. Use when the user needs to create target-specific wordlists from web content, extract email addresses or metadata from sites, or build a password attack pipeline using CeWL → rules → hashcat/john/hydra. Covers installation, depth control, word filtering, email extraction, metadata parsing, proxy and authentication options, and full password attack methodology integration.

0
installs
▌
Ffuf · jperezduerto
Operate ffuf (Fuzz Faster U Fool) — an extremely fast web fuzzer written in Go. Use when the user needs to brute-force web directories, discover virtual hosts, fuzz GET/POST parameters, headers, or subdomains, or when the user asks about ffuf, directory brute forcing, web fuzzing, or content discovery. Covers installation, all filtering and matching flags, multiple wordlist positions (FUZZ, custom keywords), VHOST discovery, parameter fuzzing, recursion, output formats, rate limiting, authentication (cookies, headers), custom wordlists, and integration with SecLists.

0
installs
▌
Jadx · jperezduerto
Decompile and reverse engineer Android APK, DEX, AAR, and JAR files using JADX (skylot/jadx, 43k+ stars). Use when performing mobile application security assessments, hunting for hardcoded secrets/API keys, analyzing AndroidManifest.xml for exported components, reverse engineering API calls, or preparing for dynamic analysis with Frida. Covers jadx CLI and jadx-gui, output structure, deobfuscation options, Smali vs Java output, Gradle export, thread tuning, secret/key hunting workflows, and integration with Frida for dynamic analysis following static review.

0
installs
▌
Nmap · jperezduerto
Build, extend, and operate nmap — the industry-standard network mapper and port scanner. Use when performing host discovery, port scanning, service enumeration, OS detection, or running NSE scripts during penetration testing engagements or network audits. Covers host discovery techniques, scan types (SYN, TCP, UDP, version, script), timing templates, NSE scripting categories, output formats, firewall evasion, performance tuning, and integration with Metasploit db_nmap and downstream tools.

0
installs
▌
Pacu · jperezduerto
Build, extend, and operate Pacu — the open-source AWS exploitation framework by Rhino Security Labs. Use when performing AWS penetration testing, privilege escalation, lateral movement, or data exfiltration in authorized cloud engagements. Use when the user asks about AWS attack modules, IAM privilege escalation paths, EC2 exploitation, S3 exfiltration, or Lambda enumeration. Covers installation, session management, module categories, key AWS attack modules, role assumption, and full AWS pentest workflow.

0
installs
▌
Pspy · jperezduerto
Operate and interpret pspy — an unprivileged Linux process monitor that snoops /proc and inotify without requiring root. Use when conducting privilege escalation assessments, hunting cron jobs, catching credential leakage in process arguments, monitoring file system events, or identifying writable scripts executed by higher-privileged processes. Covers binary selection, execution flags, output interpretation, cron job detection, PrivEsc workflows, and integration with post-exploitation frameworks.

0
installs
▌
Veil · jperezduerto
Build, extend, and operate Veil — a payload generation framework for antivirus evasion. Use when working with Veil-Evasion, when the user needs to generate AV-evading payloads, when creating shellcode stagers in Python, C, C#, Go, PowerShell, or Ruby, or when testing evasion efficacy against endpoint defenses. Covers installation, Veil-Evasion module usage, payload types, output formats, msfvenom shellcode integration, custom shellcode injection, compiler options, and evasion testing workflows.

0
installs
▌
Yara · jperezduerto
Write, compile, and apply YARA rules for malware detection and threat hunting. Use when the user needs to create pattern-matching rules for malware samples, write detection signatures for threat intelligence, scan files or process memory, integrate YARA with ClamAV or LOKI, or work with the YARA-X Rust rewrite. Covers rule syntax, string types, conditions, modules (pe, elf, math, hash, cuckoo), CLI usage, writing detection rules for real-world malware families, and integration into SOC/IR workflows.

0
installs
▌
Amass · jperezduerto
Build, extend, and operate Amass — the OWASP attack surface mapping tool for subdomain enumeration, ASN/org discovery, and DNS intelligence. Use when performing external reconnaissance, passive or active subdomain enumeration, certificate transparency analysis, ASN mapping, or tracking changes in an attack surface. Use when the user asks about subdomain discovery, passive DNS, API key integration, graph visualization, Amass config files, or comparing Amass with subfinder. Covers installation, all subcommands, config, data sources, brute force, resolvers, and visualization.

0
installs
▌
Arjun · jperezduerto
Operate Arjun — an HTTP parameter discovery tool that finds hidden GET, POST, JSON, and XML parameters in web endpoints through intelligent wordlist-based bruteforcing. Use when mapping an application's attack surface, discovering undocumented API parameters, or preparing targets for fuzzing with ffuf, SQLMap, or XSStrike. Covers installation, GET/POST/JSON/XML modes, Burp import, custom wordlists, threading, output formats, and integration into a full web application testing workflow.

0
installs
▌
Httpx · jperezduerto
Operate and pipeline httpx — a fast, multi-purpose HTTP toolkit by ProjectDiscovery for probing live web services at scale. Use when working with projectdiscovery/httpx, when the user needs to identify live hosts from a list, extract status codes, page titles, tech stacks, web server banners, content lengths, or response times. Covers installation, all major flags, output formats, matching/filtering, favicon hashing, custom headers, rate limiting, and integration in the subfinder → httpx → nuclei reconnaissance pipeline.

0
installs
▌
Hydra · jperezduerto
Operate and tune Hydra (thc-hydra) — the fast, parallelized online password brute-forcing tool supporting 50+ protocols. Use when performing credential attacks against SSH, FTP, HTTP forms, RDP, SMB, MySQL, MSSQL, VNC, SNMP, LDAP, POP3, IMAP, SMTP, and more. Covers all major flags, http-form-post syntax, thread tuning, proxy routing, combo file usage, integration with CeWL/SecLists/crunch/Burp, and operational opsec considerations for authorized penetration testing engagements.

0
installs
▌
Nikto · jperezduerto
Build, operate, and interpret Nikto — a web server scanner that identifies misconfigurations, outdated software, dangerous files, and known CVEs across HTTP/HTTPS targets. Use when performing web server reconnaissance, checking for default credentials, enumerating CGI vulnerabilities, or validating SSL/TLS posture. Covers installation, tuning, output formats, authentication, evasion, plugin system, and OSVDB/CVE interpretation.

0
installs
▌
Scapy · jperezduerto
Build, extend, and operate Scapy — an interactive Python packet manipulation library for crafting, sending, sniffing, and dissecting network packets. Use when the user asks about Scapy, custom packet crafting, network fuzzing, protocol implementation, ARP scanning, SYN scanning, traceroute, DNS queries, pcap analysis, wireless frame injection, or scripting automated network probes. Covers interactive mode, layer stacking, all major send/receive functions, sniffing with callbacks, ARP/SYN/DNS operations, pcap I/O, RadioTap wireless injection, GRE tunneling, and network fuzzing.

0
installs
▌
Chisel · jperezduerto
Build, operate, and chain Chisel — a fast TCP/UDP tunnel over HTTP/HTTPS written in Go. Use when working with jpillora/chisel, when the user needs to tunnel traffic through firewalls, set up reverse tunnels from compromised hosts, create SOCKS proxies for pivoting, or forward ports across NAT boundaries. Covers installation, server/client setup, forward and reverse tunnels, SOCKS proxy, authentication, TLS, fingerprinting, multi-hop pivoting, and comparison with SSH tunneling and ligolo-ng.

0
installs
▌
Commix · jperezduerto
Operate Commix — an automated OS command injection exploitation tool that detects and exploits command injection vulnerabilities in web parameters, cookies, and headers. Use when testing for OS command injection in GET/POST parameters, cookies, HTTP headers, or when manual injection is confirmed and automation is needed for shell access. Covers installation, injection techniques (results-based, time-based, file-based), shell access, tamper scripts, authentication, proxy, and command injection testing methodology.

0
installs
▌
Crunch · jperezduerto
Build, extend, and operate Crunch — a wordlist generator for creating custom character-set and pattern-based wordlists for password attacks. Use when the user needs to generate wordlists by character set, length range, custom patterns, or permutations. Covers installation, character set syntax, built-in charset files, pattern mode with placeholders, output to file, piping to hashcat/john/hydra, compression options, output limiting, start and end string control, permutation mode, and integration with password cracking methodology.

0
installs
▌
Sqlmap · jperezduerto
Operate sqlmap for automatic SQL injection detection and database takeover. Use when the user needs to test for SQL injection, enumerate database contents, extract tables and data, obtain OS shells or file read/write access, bypass WAFs with tamper scripts, or integrate with Burp Suite saved requests. Covers detection techniques, injection types (boolean, time, error, union, stacked), all enumeration flags, second-order injection, tamper scripting, request customization, and advanced evasion. Source: https://github.com/sqlmapproject/sqlmap

0
installs
▌
Wifite · jperezduerto
Build, extend, and operate Wifite — an automated wireless auditing tool for WPA/WPA2, WPS, PMKID, and WEP attacks. Use when the user needs to audit wireless networks, capture handshakes, perform PMKID attacks, crack WPS PINs, or run automated Wi-Fi assessments. Covers installation, target selection, WPA handshake capture, PMKID attacks, WPS attacks, WEP cracking, custom wordlists, monitor mode management, and comparison with manual aircrack-ng workflow for professional wireless penetration testing engagements.

0
installs
▌
Wpscan · jperezduerto
Build, extend, and operate WPScan — a WordPress security scanner for identifying vulnerabilities in WordPress installations, themes, and plugins. Use when the user asks about WPScan, WordPress enumeration, plugin/theme vulnerability scanning, WordPress brute force, xmlrpc exploitation, WordPress REST API enumeration, or automated WordPress security assessments. Covers installation, API token setup, all enumeration modes, detection strategies, brute force, output formats, stealthy scanning, vulnerability database integration, and full WordPress assessment workflow.

0
installs
▌
Apktool · jperezduerto
Reverse engineer Android APKs using Apktool. Use when decoding APKs to smali and resources, rebuilding modified APKs, bypassing certificate pinning, injecting Frida gadgets, analyzing AndroidManifest.xml for attack surface, modifying network security config, or performing combined static analysis with jadx. Covers installation, decode/rebuild workflow, framework management, smali code structure, APK signing, manifest analysis, certificate pinning bypass, Frida gadget injection, and integration with jadx for full decompilation.

0
installs
▌
Autopsy · jperezduerto
Build, extend, and operate Autopsy — the open-source digital forensics platform built on The Sleuth Kit. Use when conducting DFIR investigations, analyzing disk images, performing file carving, keyword searching, email analysis, or building forensic case files. Use when the user asks about dead-box forensics, memory analysis integration, timeline analysis, hash verification, ingest modules, or generating forensic reports. Covers installation, case creation, data sources, ingest modules, analysis techniques, and investigation methodology.

0
installs
▌
Binwalk · jperezduerto
Build, extend, and operate Binwalk — a fast, easy-to-use tool for analyzing, reverse engineering, and extracting firmware images. Use when the user asks about firmware analysis, embedded file extraction, entropy analysis, IoT security research, or hardware hacking. Covers installation, signature scanning, file extraction, recursive extraction, entropy analysis, custom magic signatures, supported formats (squashfs, cramfs, jffs2, LZMA, gzip, and more), firmware modification workflow, filesystem extraction, and firmware version diffing.

0
installs
▌
Gdb Gef · jperezduerto
Build, extend, and operate GDB with GEF (GDB Enhanced Features) for binary exploit development, reverse engineering, and vulnerability research. Use when debugging ELF/PE/Mach-O binaries, developing heap or stack exploits, analyzing memory layout, building ROP chains, or integrating GDB with pwntools. Use when the user asks about GEF commands (vmmap, heap, checksec, pattern, xinfo, rop, canary), heap exploitation helpers, breakpoints, memory examination, or comparing GEF with PEDA and pwndbg.

0
installs
▌
Hashcat · jperezduerto
Operate hashcat — the world's fastest CPU/GPU-based password recovery tool. Use when cracking password hashes obtained during a pentest, CTF, or red team engagement, when the user asks about offline password cracking, hash identification, rule-based attacks, mask attacks, combinator attacks, or integrating hashcat with secretsdump/mimikatz output. Covers installation with GPU drivers, all attack modes (-a 0/1/3/6/7), hash types (-m), rule engines, mask charsets, potfile management, session control, brain server, distributed cracking, and end-to-end AD credential cracking workflows.

0
installs
▌
Masscan · jperezduerto
Build, extend, and operate Masscan — the fastest Internet port scanner, capable of scanning the entire IPv4 address space in under 6 minutes at 10 million packets/second. Use when performing large-scale network reconnaissance, port enumeration, banner grabbing, or building scanning pipelines. Use when the user asks about high-speed scanning, comparing Masscan vs nmap, rate tuning, output formats, or integrating Masscan with nmap and Nuclei for vulnerability discovery pipelines.

0
installs
▌
Netexec · jperezduerto
Operate NetExec (nxc) — the successor to CrackMapExec maintained at Pennyw0rth/NetExec (4.2k+ stars). Use when enumerating and attacking Windows/AD environments via SMB, LDAP, WinRM, SSH, FTP, MSSQL, or RDP. Covers credential checking, pass-the-hash, Kerberos auth, share/user/group/session enumeration, remote command execution, the module system (lsassy, mimikatz, spider_plus, zerologon, procdump), BloodHound integration, and Active Directory password spray workflows for authorized penetration testing engagements.

0
installs
▌
Radare2 · jperezduerto
Operate radare2 (r2) — an open source reverse engineering framework and binary analysis toolkit. Use when disassembling, debugging, or patching binaries, when the user asks about static analysis, dynamic analysis, ROP gadget hunting, shellcode analysis, binary diffing, CTF reversing challenges, or malware analysis. Covers r2 CLI, analysis commands, visual/graph mode, scripting with r2pipe, Cutter GUI, r2pm plugin manager, and integration workflows with Ghidra and GDB.

0
installs
▌
Tcpdump · jperezduerto
Build, extend, and operate tcpdump — the command-line packet analyzer for capturing and analyzing network traffic. Use when the user asks about tcpdump, packet capture, BPF filters, pcap files, network traffic analysis, protocol-specific filtering, rotating captures, remote capture over SSH, or integrating with Wireshark. Covers capture basics, all major flags, BPF filter syntax, output verbosity, ASCII/hex display, timestamp formats, rotating captures, common protocol filters, credential extraction patterns, attack analysis, and Wireshark integration.

0
installs
▌
Beef Xss · jperezduerto
Operate BeEF (Browser Exploitation Framework) — a penetration testing tool that hooks browsers via a JavaScript payload and enables command-and-control of hooked browsers through a web UI and REST API. Use when demonstrating XSS impact, conducting browser-based attacks, chaining with Metasploit for post-exploitation, testing social engineering scenarios, or researching browser security. Covers installation (Docker, source), hook delivery, control panel, command modules (network, keylogger, social engineering, phishing, tunneling), REST API, custom modules, and attack methodology.

0
installs
▌
Chainsaw · jperezduerto
Operate Chainsaw — a fast Windows event log (EVTX) analysis tool with Sigma rule integration for rapid threat hunting and incident response. Use when analyzing Windows event logs for lateral movement, credential access, persistence, execution, or defense evasion artifacts. Covers installation (cargo, releases), hunt mode with Sigma rules, search mode, dump mode, supported formats (EVTX, JSON), output formats (ASCII table, CSV, JSON), writing custom detection rules, key detection categories, and incident response triage workflows.

0
installs
▌
Gitleaks · jperezduerto
Operate and configure Gitleaks — a SAST/secret-detection tool that scans git repositories, commit histories, and staged changes for leaked credentials, API keys, tokens, and private keys. Use when working with gitleaks/gitleaks, when the user needs to audit a repository for secrets, set up pre-commit hooks, integrate into CI/CD pipelines, write custom detection rules, or establish baselines to suppress known findings. Covers installation, detect/protect modes, .gitleaks.toml configuration, custom rules, allowlists, output formats, and CI/CD integration.

0
installs
▌
Gobuster · jperezduerto
Use and operate Gobuster — a fast directory/file, DNS subdomain, virtual host, fuzzing, S3, and GCS brute-forcing tool written in Go. Use when enumerating web directories and files, discovering subdomains via DNS brute force, finding virtual hosts, fuzzing URL parameters, or testing cloud storage buckets. Covers all modes (dir, dns, vhost, fuzz, s3, gcs, tftp), global flags, performance tuning, authentication, proxy support, wildcard detection, wordlist selection with SecLists, output formats, and comparison with ffuf, feroxbuster, and dirsearch. GitHub: https://github.com/OJ/gobuster (13.6k stars).

0
installs
▌
Gtfobins · jperezduerto
Operate and apply GTFOBins — the curated list of Unix binaries exploitable for privilege escalation, file operations, shell spawning, and capability abuse. Use when performing Linux/Unix privilege escalation, post-exploitation enumeration, SUID/sudo/capabilities exploitation, or when the user needs to leverage a specific binary to escape restricted shells, read protected files, or gain a root shell. Covers all GTFOBins categories, key binary techniques, SUID enumeration, sudo -l parsing, capabilities exploitation, and integration with LinPEAS/LinEnum output.

0
installs
▌
Havoc C2 · jperezduerto
Build, extend, and operate Havoc C2 — a modern command-and-control framework featuring the Demon agent. Use when deploying Havoc on red team engagements, when the user needs to set up a teamserver, generate implants, configure listeners, or execute post-exploitation tasks. Covers installation, teamserver profiles, client setup, Demon agent generation, HTTP/HTTPS listeners, agent command reference, BOF integration, process injection, token manipulation, .NET execution, and comparison with Sliver and Cobalt Strike.

0
installs
▌
Impacket · jperezduerto
Use and operate Impacket — a collection of Python classes for working with network protocols, essential for Active Directory attacks and lateral movement. Use when performing AD enumeration, credential dumping (SAM, LSA, NTDS.dit, DCSync), remote code execution via SMB/WMI/DCOM, Kerberoasting, AS-REP Roasting, NTLM relay attacks, Golden/Silver ticket forgery, or MSSQL attacks. Covers installation, all major example scripts, authentication methods, and complete AD attack chains. GitHub: https://github.com/fortra/impacket (15.6k stars).

0
installs
▌
Kerbrute · jperezduerto
Operate Kerbrute — a Kerberos-based Active Directory enumeration and brute force tool that performs user enumeration, password spraying, and credential brute force via Kerberos pre-authentication without triggering traditional LDAP lockout mechanisms. Use during Active Directory assessments for username enumeration, safe password spraying, and credential testing. Covers installation (Go, releases), user enumeration, password spraying cadence, brute force, DC targeting, verbose output, output files, and integration with BloodHound and NetExec AD attack workflows.

0
installs
▌
Mimikatz · jperezduerto
Operate mimikatz — the definitive Windows credential extraction and Active Directory attack tool. Use when extracting credentials from Windows memory or the SAM database, performing DCSync attacks, forging Kerberos tickets (Golden/Silver), conducting Pass-the-Hash or Pass-the-Ticket attacks, or any AD post-exploitation requiring credential access. Covers all major modules (sekurlsa, lsadump, kerberos, token, crypto, dpapi, vault), in-memory execution via Invoke-Mimikatz, Cobalt Strike integration, detection evasion techniques, and complete AD attack chains.

0
installs
▌
Peass Ng · jperezduerto
Operate PEASS-ng (Privilege Escalation Awesome Scripts SUITE) — the industry-standard post-exploitation enumeration toolkit covering LinPEAS and WinPEAS. Use when performing local privilege escalation on Linux, Windows, or macOS targets, when the user asks about PEASS, linpeas.sh, winpeas.exe, or winpeas.bat, or when the user needs to enumerate a compromised host for PE vectors. Covers installation, all execution methods (curl-to-bash, in-memory, AV bypass, certutil), output color interpretation, key checks, flags, quiet/stealth mode, targeted check selection, and integration with privilege escalation methodology.

0
installs
▌
Pwntools · jperezduerto
Build, extend, and operate pwntools — a CTF framework and exploit development library for Python. Use when writing binary exploits, solving CTF pwn challenges, building ROP chains, crafting shellcode, or analyzing ELF binaries. Covers installation, core modules (process, remote, ELF, ROP, fmtstr, shellcraft, DynELF), packing/unpacking helpers, cyclic pattern generation, GDB integration, and complete CTF exploit patterns including buffer overflow, format string, ret2libc, and SROP.

0
installs
▌
Recon Ng · jperezduerto
Build, extend, and operate Recon-ng — a web reconnaissance framework with a modular architecture for OSINT gathering and passive reconnaissance. Use when the user needs to enumerate domains, discover hosts and contacts, harvest credentials, or produce structured OSINT reports. Covers installation, workspace management, marketplace, module loading and configuration, API key management, database queries, reporting modules, and OSINT methodology integration for penetration testing and intelligence-gathering engagements.

0
installs
▌
Rustscan · jperezduerto
Operate RustScan — an extremely fast modern port scanner that scans all 65,535 ports in seconds and automatically passes results to Nmap for deep service/script scanning. Use when the user needs fast port discovery, when the user asks about RustScan, when conducting external or internal network reconnaissance, or when standard Nmap scans are too slow. Covers installation (cargo, Docker, package managers, releases), batch size tuning, timeout configuration, Nmap integration, custom scripts, accessible mode, performance tuning, and how RustScan compares to and chains with Nmap and masscan.

0
installs
▌
Seclists · jperezduerto
Use, navigate, and integrate SecLists — the community-curated collection of security wordlists and payloads maintained at danielmiessler/SecLists (61k+ stars). Use when selecting wordlists for directory bruteforcing, credential spraying, fuzzing, subdomain enumeration, or payload injection. Covers directory structure, list selection strategy, key files, integration with ffuf/gobuster/hydra/burp/wfuzz, custom list creation, and operational best practices for penetration testing engagements.

0
installs
▌
Sherlock · jperezduerto
Build, extend, and operate Sherlock — an OSINT tool for hunting usernames across social networks and online platforms. Use when the user asks about Sherlock, OSINT username enumeration, social media footprinting, account discovery across platforms, or building a digital profile of a target. Covers installation, single and bulk username searches, output formats (text, CSV, XLSX), filtering by site, proxy and Tor support, NSFW site inclusion, false positive mitigation, and integration with theHarvester and SpiderFoot for comprehensive OSINT investigations.

0
installs
▌
Xsstrike · jperezduerto
Operate XSStrike — an advanced XSS detection and exploitation suite with intelligent payload generation, WAF fingerprinting, and DOM analysis. Use when testing web applications for reflected, stored, DOM-based, or blind XSS vulnerabilities. Covers installation, URL/POST scanning, crawler mode, blind XSS, fuzzer, custom headers, proxy integration, encoding, and a complete XSS testing methodology.

0
installs
▌
Autorecon · jperezduerto
Operate AutoRecon — a multi-threaded network reconnaissance tool that automatically runs appropriate enumeration tools based on detected services. Use during OSCP labs, CTF initial enumeration, or real-world external/internal network pentests to automate the discovery phase. Covers installation, target specification, port scan profiles, per-service tool execution, custom plugins, output structure, concurrency controls, and a full OSCP/CTF enumeration workflow.

0
installs
▌
Bettercap · jperezduerto
Operate and script Bettercap — a comprehensive network attack and monitoring framework. Use when working with bettercap/bettercap, when the user needs to perform ARP spoofing, DNS spoofing, SSL stripping, credential sniffing, WiFi attacks (deauth, handshake capture, evil twin), BLE enumeration, HID injection, or man-in-the-middle workflows. Covers installation, interactive REPL, caplets, all major modules, REST API, web UI, and comparison with Ettercap.

0
installs
▌
Burpsuite · jperezduerto
Operate Burp Suite Community and Professional for web application penetration testing. Use when intercepting HTTP/S traffic, fuzzing parameters, testing authentication bypasses, scanning for vulnerabilities, or performing advanced web application assessments. Covers proxy setup, Intercept, Repeater, Intruder (all attack types), Scanner, Sequencer, Decoder, Comparer, Logger, Collaborator, BApp Store extensions (Autorize, Param Miner, JWT Editor, Turbo Intruder, ActiveScan++), scope control, session handling, macros, REST API, and Bambda filters.

0
installs
▌
Cyberchef · jperezduerto
Use CyberChef for data encoding, decoding, encryption, deobfuscation, and transformation workflows. Use when the user needs to decode Base64/hex payloads, decrypt malware strings, deobfuscate PowerShell or JavaScript, parse certificates, extract IOCs, or chain complex data transformations. Covers the recipe concept, key operations, chaining, the Magic auto-detect feature, CLI usage (cc), self-hosting via Docker, API automation, URL-shareable recipes, and real-world malware deobfuscation and CTF workflows.

0
installs
▌
Evilginx2 · jperezduerto
Deploy and operate Evilginx2 — an adversary-in-the-middle phishing framework that captures session tokens and cookies to bypass MFA. Use when working with kgretzky/evilginx2, when the user needs to set up a phishing page using a built-in or custom phishlet, configure DNS and TLS, create and manage lures, capture and extract session cookies from victim logins, or build custom phishlets for new targets. Covers installation, phishlet concepts, full deployment workflow, session extraction, DNS/TLS configuration, and detection/defense awareness.

0
installs
▌
Exploitdb · jperezduerto
Search and use ExploitDB and searchsploit — the largest public archive of exploits, shellcode, and papers maintained by Offensive Security. Use when working with offensive-security/exploitdb, when the user needs to find public exploits for a CVE or software version, use searchsploit CLI on Kali, examine or mirror exploit code, parse nmap XML for matching exploits, query the Google Hacking Database (GHDB), update the local database, or integrate findings into Metasploit. Covers searchsploit flags, reading exploits safely, modification for targets, and GHDB usage.

0
installs
▌
Ghidra Re · jperezduerto
Install, configure, and operate Ghidra for binary reverse engineering. Use when the user needs to analyze executables, firmware, or malware with Ghidra; when performing static analysis, decompilation, function analysis, or patching; when scripting Ghidra with Java or Python (Jython/PyGhidra); when running headless batch analysis; or when comparing Ghidra workflows to IDA Pro or radare2. Covers installation, CodeBrowser navigation, decompiler, data types, debugging, plugin development, and CTF workflows. Source: https://github.com/NationalSecurityAgency/ghidra

0
installs
▌
Ligolo Ng · jperezduerto
Operate Ligolo-ng — an advanced tunneling and pivoting framework using TUN interfaces to route traffic through compromised hosts without SOCKS proxies or proxychains. Use when pivoting into internal networks during penetration tests, setting up multi-hop tunnels (double pivoting), forwarding ports, or replacing chisel/SSH tunneling in your post-exploitation workflow. Covers installation, TUN interface setup, proxy/agent architecture, starting tunnels, adding routes, double pivoting, port forwarding, multiple sessions, and comparison with alternative pivoting tools.

0
installs
▌
Mitmproxy · jperezduerto
Operate, script, and extend mitmproxy — an interactive TLS-capable intercepting proxy with three interfaces (console, web, scriptable dump). Use when working with mitmproxy/mitmproxy, when the user needs to intercept and modify HTTP/HTTPS traffic, write Python addons to automate request/response manipulation, replay flows, export to curl/httpie, analyze mobile app traffic, or run in transparent/reverse/upstream proxy modes. Covers all three binaries, proxy modes, CA installation, flow filtering, Python scripting API, addons, and Android/iOS configuration.

0
installs
▌
Owasp Zap · jperezduerto
Use and operate OWASP ZAP (Zed Attack Proxy) — the world's most widely used free web application security scanner. Use when performing web application penetration testing, running automated DAST scans, configuring a proxy for manual testing, handling authentication for scans, integrating security scanning into CI/CD pipelines, or comparing ZAP with Burp Suite. Covers installation, proxy setup, spider, active/passive scanning, Ajax Spider, authentication handling, ZAP API, Docker automation scripts (zap-baseline.py, zap-full-scan.py, zap-api-scan.py), scan policies, Zest scripting, and marketplace add-ons. GitHub: https://github.com/zaproxy/zaproxy (14.9k stars).

0
installs
▌
Responder · jperezduerto
Operate Responder — the LLMNR/NBT-NS/mDNS poisoner and credential capture framework maintained at lgandx/Responder (6.1k+ stars). Use when performing internal network attacks that exploit Windows name resolution fallback to capture NTLMv1/NTLMv2 hashes, setting up WPAD rogue proxies, relaying credentials with ntlmrelayx, or chaining into Active Directory attack paths. Covers poisoning mechanics, interface selection, analyze mode, WPAD, captured hash locations, hash types, relay attacks, Responder.conf tuning, MultiRelay, and hashcat/john cracking integration.

0
installs
▌
Sliver C2 · jperezduerto
Build, extend, and operate Sliver — the open-source C2 framework by BishopFox. Use when conducting red team operations, building and deploying implants, managing beacons and sessions, or implementing post-exploitation tradecraft. Use when the user asks about Sliver implant generation, C2 listeners, MTLS/HTTP/DNS/WireGuard channels, beacon vs session mode, BOF loading, armory extensions, multiplayer mode, OPSEC considerations, or comparing Sliver to Cobalt Strike and Mythic.

0
installs
▌
Subfinder · jperezduerto
Use and operate Subfinder — a fast passive subdomain enumeration tool by ProjectDiscovery that queries dozens of passive DNS data sources simultaneously. Use when performing subdomain discovery during recon, configuring API keys for maximum source coverage, integrating passive enumeration into recon pipelines with httpx and nuclei, or chaining with active tools for full-spectrum recon-to-exploit workflows. Covers installation, all flags, provider-config.yaml setup with all supported API key providers, output formats, recursive enumeration, rate limiting, silent mode, stdin/stdout piping, and complete pipeline integration. GitHub: https://github.com/projectdiscovery/subfinder (13.4k stars).

0
installs
▌
Wireshark · jperezduerto
Capture, analyze, and dissect network traffic with Wireshark and tshark. Use when analyzing PCAPs, performing live network capture, decrypting TLS/SSL traffic, debugging protocols, hunting for credentials or sensitive data in network streams, or automating packet analysis. Covers capture vs display filters, BPF syntax, stream following, protocol hierarchy, IO graphs, tshark CLI, ring buffer capture, SSL/TLS decryption with pre-master secrets, WiFi and USB capture, expert info, statistics, and coloring rules for penetration testing and network forensics workflows.

0
installs
▌
Bloodhound · jperezduerto
Operate BloodHound and BloodHound Community Edition (CE) for Active Directory attack path analysis. Use when performing AD penetration testing, enumerating domain trusts, identifying Kerberoastable users, finding paths to Domain Admin, or analyzing ACL-based attack paths. Covers CE vs Legacy architecture, Docker installation, SharpHound and BloodHound.py collection, data ingestion, built-in queries, custom Cypher queries, edge semantics (MemberOf, HasSession, AdminTo, GenericAll, WriteDACL, DCSync), and attack path execution workflows.

0
installs
▌
Evil Winrm · jperezduerto
Build, extend, and operate Evil-WinRM — a WinRM shell designed for pentesting Windows environments. Use when the user asks about Evil-WinRM, Windows remote management shells, pass-the-hash over WinRM, uploading/downloading files to Windows targets, loading PowerShell scripts or C# DLLs in memory, bypassing AMSI, or post-exploitation workflows on Windows hosts. Covers installation, basic and advanced connection options, pass-the-hash, SSL mode, file transfer, script/DLL loading, AMSI bypass, logging, Docker usage, proxychains, and full post-exploitation workflow.

0
installs
▌
Eyewitness · jperezduerto
Operate and interpret EyeWitness — a web, RDP, and VNC screenshot tool for rapid visual triage of large attack surfaces. Use when conducting external or internal network assessments, processing nmap or Nessus output to quickly identify high-value web services, or building target triage workflows for large scope engagements. Covers installation (Docker, pip, source), input modes (file, nmap XML, Nessus XML), protocol support (HTTP/HTTPS, RDP, VNC), report generation, active scanning, and integration with recon pipelines.

0
installs
▌
Scoutsuite · jperezduerto
Build, extend, and operate ScoutSuite — a multi-cloud security auditing tool by NCC Group. Use when performing cloud security assessments against AWS, Azure, GCP, Alibaba Cloud, or OCI. Use when the user asks about cloud misconfigurations, CIS benchmark checks, IAM analysis, or generating HTML security reports. Covers installation, provider authentication, scanning, rule engine, custom rules, findings triage, CI/CD integration, and cloud assessment workflow.

0
installs
▌
Spiderfoot · jperezduerto
Build, extend, and operate SpiderFoot — an OSINT automation platform with 200+ modules for passive and active reconnaissance. Use when the user needs automated intelligence gathering on IP addresses, domains, email addresses, phone numbers, usernames, subnets, or ASNs. Covers installation, web UI and CLI operation, scan types, module configuration, API key setup, correlation engine, data visualization, export formats, and OSINT investigation methodology for penetration testing and threat intelligence engagements.

0
installs
▌
Aircrack Ng · jperezduerto
Operate the Aircrack-ng WiFi security suite for wireless network assessment. Use when performing WEP, WPA, or WPA2 cracking, capturing 4-way handshakes, executing PMKID attacks, injecting deauth frames, performing ARP replay attacks, or analyzing wireless traffic. Covers airmon-ng (monitor mode), airodump-ng (capture/scan), aireplay-ng (deauth/fake auth/ARP replay), aircrack-ng (cracking), airdecap-ng, packetforge-ng, besside-ng, WPS attacks with reaver, hashcat integration with -m 22000, and evil twin concepts for authorized wireless penetration testing engagements.

0
installs
▌
Feroxbuster · jperezduerto
Operate Feroxbuster — a fast, recursive content discovery tool written in Rust for brute-forcing files, directories, and endpoints against web servers. Use when performing web content enumeration, finding hidden paths, discovering API endpoints, or recursively walking directory structures. Covers installation, wordlists, extensions, filtering, recursion, rate limiting, output formats, auto-tune, scan resumption, and comparison with ffuf, gobuster, and dirsearch.

0
installs
▌
Proxychains · jperezduerto
Configure and operate Proxychains (proxychains-ng) to route tool traffic through SOCKS4, SOCKS5, or HTTP proxy chains for pivoting, anonymisation, and internal network access. Use when routing nmap, netexec, curl, or other tools through SSH tunnels, chisel, ligolo-ng, or SOCKS proxies during internal network pivoting. Covers installation, chain types, proxy configuration, DNS resolution, integration with tunnelling tools, and pivoting methodology.

0
installs
▌
Set Toolkit · jperezduerto
Build, extend, and operate the Social Engineering Toolkit (SET) — a framework for simulating human-vector attacks during authorized red team and pentesting engagements. Use when the user asks about SET, social engineering attack vectors, credential harvesting, phishing simulation, HTA attacks, PowerShell injection, Arduino HID attacks, or Metasploit-integrated client-side exploits. Covers setoolkit menu navigation, all major attack vectors, website cloning, custom phishing templates, Java applet attacks, mass mailer campaigns, and engagement methodology for authorized simulations.

0
installs
▌
Volatility3 · jperezduerto
Perform memory forensics using Volatility3 — the Python framework for analyzing RAM dumps from Windows, Linux, and macOS systems. Use when investigating malware infections, rootkits, credential theft, injected code, lateral movement artifacts, or any scenario requiring process, network, file, or registry analysis from a memory image. Covers installation, acquiring memory dumps, all key plugins (pslist, pstree, netscan, malfind, hashdump, dumpfiles, cmdline), symbol table creation, Linux analysis, rootkit detection, and full malware analysis workflows.

0
installs
▌
Theharvester · jperezduerto
Operate theHarvester — a passive OSINT reconnaissance tool for gathering email addresses, subdomains, hosts, employee names, and open ports from public sources. Use during the reconnaissance phase of penetration tests or red team engagements to enumerate external attack surface from a domain name using dozens of data sources including Google, Bing, LinkedIn, GitHub, Shodan, CertSpotter, crt.sh, and VirusTotal. Covers installation, data sources, all major flags (-d, -b, -l, -n, -v, -S, -f), API key configuration, output formats, and OSINT recon workflow integration.

0
installs
▌
Katana Crawler · jperezduerto
Operate Katana — the next-generation web crawling and spidering framework by ProjectDiscovery. Use when the user needs to enumerate web application endpoints, discover JavaScript files and API paths, extract forms, emails, or parameters, or when the user asks about Katana, web crawling, or spidering for bug bounty or pentesting. Covers installation (Go install, Docker), standard and headless Chrome crawling modes, depth and scope control, field extraction, output filtering, JavaScript parsing, automatic form filling, rate limiting, custom headers, and integration with the ProjectDiscovery tool chain (subfinder, httpx, nuclei).

0
installs
▌
Nuclei Scanner · jperezduerto
Build, extend, and operate Nuclei — a fast, template-based vulnerability scanner by ProjectDiscovery. Use when running automated vulnerability scans, writing custom detection templates, or building recon pipelines with subfinder and httpx. Covers installation, template structure (id, info, requests, matchers, extractors), scan execution flags, template selection by tag and severity, rate limiting, output formats, headless scanning, interactsh OOB integration, workflow chaining, and the subfinder → httpx → nuclei pipeline.

0
installs
▌
John The Ripper · jperezduerto
Build, extend, and operate John the Ripper — a fast password cracking tool supporting hundreds of hash types. Use when cracking password hashes, extracting hashes from archives or documents, performing wordlist or rule-based attacks, or recovering credentials during a penetration test. Covers community vs jumbo builds, supported formats, auto-detect, wordlist mode, rule sets (Jumbo, KoreLogic, All), incremental mode, mask mode, *2john extraction utilities, session management, potfile, and comparison with Hashcat.

0
installs
▌
Metasploit Framework · jperezduerto
Operate Metasploit Framework for penetration testing engagements. Use when the user needs to run exploits, generate payloads with msfvenom, manage Meterpreter sessions, perform post-exploitation (hashdump, getsystem, pivoting, portfwd), set up multi/handler listeners, enumerate with db_nmap, write custom modules, or bypass AV/EDR. Covers msfconsole, workspace management, exploit/payload selection, meterpreter commands, evasion, auxiliary modules, and integration with Cobalt Strike concepts. Source: https://github.com/rapid7/metasploit-framework

0
installs
▌
Frida Instrumentation · jperezduerto
Operate Frida — a dynamic instrumentation toolkit for hooking and modifying running processes. Use when performing runtime analysis of desktop or mobile applications, bypassing SSL pinning or root detection, hooking native/Java/Objective-C functions, reversing mobile apps (Android/iOS), or automating instrumentation with Objection. Covers installation, JavaScript API (Interceptor, Module, Memory, NativeFunction), frida-trace, RPC exports, Objection integration, Android/iOS setup with frida-server, and end-to-end mobile app pentesting workflows.

0
installs
▌
Payloads All The Things · jperezduerto
Use and weaponize the PayloadsAllTheThings payload library for web application penetration testing and CTF engagements. Use when the user needs injection payloads, bypass techniques, or exploitation strings for SQL injection, XSS, command injection, SSRF, XXE, SSTI, CSRF, LFI/RFI, directory traversal, authentication bypass, or deserialization attacks. Covers payload selection, real-world delivery with Burp Suite and curl, WAF bypass, chaining vulnerabilities, and reporting. Source: https://github.com/swisskyrepo/PayloadsAllTheThings

0
installs

76 published skills