usmanskillsmd
- 1.5k skills
- 0 followers
- 4 hours ago last updated
- ▌ Whatsapp Business Suite AI Leads Channels Campaigns 32 MCP T · usmanskillsmdAutomate WhatsApp at scale — mine leads from groups with AI, broadcast to channel followers, bulk message with ban-safe delays, schedule campaigns, auto-reply in your voice, collect reviews, and track
- ▌ Conducting Internal Reconnaissance With Bloodhound Ce · usmanskillsmdConduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identify privilege escalation chains, and discover misconfigurations in domain environments.
- ▌ Implementing Threat Intelligence Lifecycle Management · usmanskillsmdImplement a structured threat intelligence lifecycle encompassing planning, collection, processing, analysis, dissemination, and feedback stages to produce actionable intelligence for organizational d
- ▌ Pocket Alert Push Notifications For IOS And Android · usmanskillsmdThe Pocket Alert (pocketalert.app) skill for OpenClaw enables OpenClaw agents and workflows to send push notifications to iOS and Android devices. It is used to deliver alerts and updates from automat
- ▌ Implementing Infrastructure As Code Security Scanning · usmanskillsmdThis skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using tools like Checkov, tfsec, and KICS. It addresses detecting misconfigurations in Terraform,
- ▌ Implementing Deception Based Detection With Canarytoken · usmanskillsmdDeploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug tokens, DNS tokens, document tokens, and AWS key tokens.
- ▌ Implementing Network Intrusion Prevention With Suricata · usmanskillsmdDeploy and configure Suricata as a network intrusion prevention system with custom rules, Emerging Threats rulesets, and inline traffic inspection for real-time threat blocking.
- ▌ Implementing Privileged Access Management With Cyberark · usmanskillsmdDeploy CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise infrastructure. This skill covers vault architecture, session isolation, c
- ▌ Implementing Device Posture Assessment In Zero Trust · usmanskillsmdImplementing device posture assessment as a zero trust access control by integrating endpoint health signals from CrowdStrike ZTA, Microsoft Intune, and Jamf into conditional access policies that enfo
- ▌ Exploiting Active Directory Certificate Services Esc1 · usmanskillsmdExploit misconfigured Active Directory Certificate Services (AD CS) ESC1 vulnerability to request certificates as high-privileged users and escalate domain privileges during authorized red team assess
- ▌ Performing Adversary In The Middle Phishing Detection · usmanskillsmdDetect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens.
- ▌ Moltme AI Agent Dating Social Connection Platform · usmanskillsmdAI agent dating and social platform — register your agent, get matched by AI compatibility scoring, chat in real time, build relationships, and join the public feed. Agent-to-agent dating, human-to-ag
- ▌ Implementing Data Loss Prevention With Microsoft Purview · usmanskillsmdImplements data loss prevention policies using Microsoft Purview to protect sensitive information across Exchange Online, SharePoint, OneDrive, Teams, endpoint devices, and Power BI. The analyst confi
- ▌ Implementing Iso 27001 Information Security Management · usmanskillsmdISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). This skill covers the complete
- ▌ Analyzing Malware Family Relationships With Malpedia · usmanskillsmdUse the Malpedia platform and API to research malware family relationships, track variant evolution, link families to threat actors, and integrate YARA rules for detection across malware lineages.
- ▌ Exploiting Vulnerabilities With Metasploit Framework · usmanskillsmdThe Metasploit Framework is the world's most widely used penetration testing platform, maintained by Rapid7. It contains over 2,300 exploits, 1,200 auxiliary modules, and 400 post-exploitation modules
- ▌ Auditing Kubernetes Cluster Rbac · usmanskillsmdAuditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using ku
- ▌ Detecting Azure Lateral Movement · usmanskillsmdDetect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, to
- ▌ Exploiting Broken Link Hijacking · usmanskillsmdDiscover and exploit broken link hijacking vulnerabilities by identifying references to expired domains, decommissioned cloud resources, and dead external services that can be claimed by an attacker.
- ▌ Performing Service Account Audit · usmanskillsmdAudit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts. This skill covers discovery of service accounts in Active Directory, cloud pl
- ▌ Reverse Engineering Rust Malware · usmanskillsmdReverse engineer Rust-compiled malware using IDA Pro and Ghidra with techniques for handling non-null-terminated strings, crate dependency extraction, and Rust-specific control flow analysis.
- ▌
- ▌ Cross Disciplinary Bridge Finder · usmanskillsmdUse when identifying collaboration opportunities across fields, finding experts in complementary disciplines, translating methodologies between scientific domains, or building interdisciplinary resear
- ▌
- ▌ Distributed Debugging Debug Trace · usmanskillsmdYou are a debugging expert specializing in setting up comprehensive debugging environments, distributed tracing, and diagnostic tools. Configure debugging workflows, implement tracing solutions, and e
- ▌ 17th July Introduction To API Assignment Pw Skill · usmanskillsmd17th July Introduction to API Assignment PW - Skill
- ▌ Implementing Container Image Minimal Base With Distroless · usmanskillsmdReduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
- ▌ Implementing Epss Score For Vulnerability Prioritization · usmanskillsmdIntegrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based on real-world exploitation probability within 30 days.
- ▌ Performing Windows Artifact Analysis With Eric Zimmerman Too · usmanskillsmdPerform comprehensive Windows forensic artifact analysis using Eric Zimmerman's open-source EZ Tools suite including KAPE, MFTECmd, PECmd, LECmd, JLECmd, and Timeline Explorer for parsing registry hiv
- ▌ 17th July Introduction To API Assignment Pw Skill 2 · usmanskillsmd17th July Introduction to API Assignment PW - Skill
- ▌ Microsoft Azure Webjobs Extensions Authentication Events Dot · usmanskillsmdMicrosoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions.
- ▌ Implementing Next Generation Firewall With Palo Alto · usmanskillsmdConfigure and deploy Palo Alto Networks next-generation firewalls with App-ID, User-ID, zone-based policies, SSL decryption, and threat prevention profiles for enterprise network security.
- ▌ Implementing Vulnerability Management With Greenbone · usmanskillsmdDeploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.
- ▌ Implementing Network Segmentation With Firewall Zones · usmanskillsmdDesign and implement network segmentation using firewall security zones, VLANs, ACLs, and microsegmentation policies to restrict lateral movement and enforce least-privilege network access.
- ▌ Implementing Web Application Logging With Modsecurity · usmanskillsmdConfigure ModSecurity WAF with OWASP Core Rule Set (CRS) for web application logging, tune rules to reduce false positives, analyze audit logs for attack detection, and implement custom SecRules for a
- ▌ Performing GCP Penetration Testing With Gcpbucketbrute · usmanskillsmdPerform GCP security testing using GCPBucketBrute for storage bucket enumeration, gcloud IAM privilege escalation path analysis, and service account permission auditing
- ▌ Microsoft Azure Webjobs Extensions Authentication Events 2 · usmanskillsmdMicrosoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions. Use for token enrichment, custom claims, attribute collection, and OTP customization
- ▌ Implementing Github Advanced Security For Code Scanning · usmanskillsmdConfigure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌ Elasticsearch Integration Tests · usmanskillsmdelasticsearch integration tests — comprehensive testing patterns and workflows for Multi-language projects.
- ▌ Implementing Ot Network Traffic Analysis With Nozomi · usmanskillsmdDeploy Nozomi Networks Guardian sensors for passive OT network traffic analysis to achieve comprehensive asset visibility, real-time threat detection, and vulnerability assessment across industrial co
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌
- ▌ Azure Enterprise Infra Planner · usmanskillsmdArchitect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource
- ▌
- ▌ Azure Monitor Opentelemetry TS · usmanskillsmdInstrument applications with Azure Monitor and OpenTelemetry for JavaScript (@azure/monitor-opentelemetry). Use when adding distributed tracing, metrics, and logs to Node.js applications with Applicat
- ▌ Detecting Cryptomining In Cloud · usmanskillsmdThis skill teaches security teams how to detect and respond to unauthorized cryptocurrency mining operations in cloud environments. It covers identifying cryptomining indicators through compute usage
- ▌
- ▌
- ▌
- ▌
- ▌ Analyzing PDF Malware With Pdfid · usmanskillsmdAnalyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to identify embedded JavaScript, shellcode, exploits, and suspicious objects without opening the document. Determines the attack vector
- ▌ Exploiting OAUTH Misconfiguration · usmanskillsmdIdentifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation, token leakage, and authorization code theft during security assessments.
- ▌ Hunting For Cobalt Strike Beacons · usmanskillsmdDetect Cobalt Strike beacon network activity using default TLS certificate signatures (serial 8BB00EE), JA3/JA3S/JARM fingerprints, HTTP C2 profile pattern matching, beacon jitter analysis, and named
- ▌ Hunting For Dcom Lateral Movement · usmanskillsmdHunt for DCOM-based lateral movement by detecting abuse of MMC20.Application, ShellBrowserWindow, and ShellWindows COM objects through Sysmon Event ID 1 (process creation) and Event ID 3 (network conn
- ▌ Implementing Siem Use Case Tuning · usmanskillsmdTune SIEM detection rules to reduce false positives by analyzing alert volumes, creating whitelists, adjusting thresholds, and measuring detection efficacy metrics in Splunk and Elastic
- ▌ Performing Malware Ioc Extraction · usmanskillsmdMalware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise including file hashes, network indicators (C2 domains, IP addresses, URLs), regist
- ▌ Testing For Host Header Injection · usmanskillsmdTest web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.
- ▌
- ▌ China Sportswear Outdoor Sourcing · usmanskillsmdComprehensive sportswear and outdoor equipment sourcing guide for international buyers – provides detailed information about China's athletic apparel, footwear, outdoor gear, and accessories manufactu
- ▌ Medici Investments Position Sizer · usmanskillsmdCalculate risk-based position sizes for long stock trades. Use when user asks about position sizing, how many shares to buy, risk per trade, Kelly criterion, ATR-based sizing, or portfolio risk alloca
- ▌ Relational Database Web Cloudbase · usmanskillsmdUse when building frontend Web apps that talk to CloudBase Relational Database via @cloudbase/js-sdk – provides the canonical init pattern so you can then use Supabase-style queries from the browser.
- ▌ Wavespeed Ultimate Video Upscaler · usmanskillsmdUpscale videos to 720p, 1080p, 2K, or 4K resolution using WaveSpeed AI's Ultimate Video Upscaler. Takes a video URL and produces a higher-resolution version. Supports videos up to 10 minutes. Use when
- ▌ Managing Intelligence Lifecycle · usmanskillsmdManages the end-to-end cyber threat intelligence lifecycle from planning and direction through collection, processing, analysis, dissemination, and feedback to ensure intelligence products meet stakeh
- ▌
- ▌ Travel Price Drop Visa Reminder · usmanskillsmdPlan travel price monitoring and visa or document reminders with safe, read-only guidance. Use when a user wants price drop alerts, travel checklists, or visa timelines without booking or payment acti
- ▌
- ▌
- ▌ Carbon Footprint Calculator · usmanskillsmdcarbon footprint calculator — practical Sustainability tools and guidance for personal development.
- ▌
- ▌ Detox React Native · usmanskillsmddetox react native — comprehensive testing patterns and workflows for JavaScript projects.
- ▌ Jest Async Testing · usmanskillsmdjest async testing — comprehensive testing patterns and workflows for JavaScript projects.
- ▌ Junit5 Spring Boot · usmanskillsmdjunit5 spring boot — comprehensive testing patterns and workflows for Java projects.
- ▌ Locust Python Load · usmanskillsmdlocust python load — comprehensive testing patterns and workflows for Multi-language projects.
- ▌ Mfa Implementation · usmanskillsmdmfa implementation — comprehensive testing patterns and workflows for Multi-language projects.
- ▌ Mocha Chai Testing · usmanskillsmdmocha chai testing — comprehensive testing patterns and workflows for JavaScript projects.
- ▌ Playwright Codegen · usmanskillsmdplaywright codegen — comprehensive testing patterns and workflows for JavaScript projects.
- ▌ Human Interface Guidelines 1992 · usmanskillsmdApply and review classic desktop UI designs against the 1992 Human Interface Guidelines. Use when designing or auditing menus, windows, dialog/alert boxes, controls, icons, color, mouse/keyboard behav
- ▌ Automate Pyside6 And Screenshots · usmanskillsmdUse PyQtAuto to automate and test PySide6 applications. PyQtAuto works like Playwright for web browsers, but for Qt/PySide6 desktop applications. Screenshots can be grabbed to see what is going on.
- ▌ Analyzing Linux Kernel Rootkits · usmanskillsmdDetect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify
- ▌ Detecting Stuxnet Style Attacks · usmanskillsmdThis skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation from operators. I
- ▌
- ▌
- ▌