Skills for GitHub Copilot

Verify Agent Action

github

Ensure safe execution of AI agent actions with thorough reviews.

Hunting for DCOM Lateral Movement

mukul975

Detect DCOM abuse for enhanced cybersecurity.

Escaping Containers to Host

mukul975

Break out of containers during security assessments.

Analyzing Cobalt Strike Beacon Configuration

mukul975

Extract and analyze Cobalt Strike beacon configurations efficiently.

Hunting Bootkits in EFI

mukul975

Detect and analyze UEFI bootkits on your systems.

Assessing Vector Weaknesses

mukul975

Evaluate security risks in RAG vector stores.

Detecting Indirect Prompt Injection

mukul975

Safeguard your LLM agents from hidden threats.

Auditing Entra ID

mukul975

Perform authorized security assessments on Microsoft Entra ID.

Exploiting AD CS with Certipy

mukul975

Leverage Certipy for AD CS vulnerability assessments.

Social Engineering Penetration Test

mukul975

Assess human vulnerabilities with simulated attacks.

Building Threat Intelligence Platform

mukul975

Integrate open-source CTI tools for threat intelligence.

Abusing Shadow Credentials for Privilege Escalation

mukul975

Take over Active Directory accounts stealthily using shadow credentials.

Coercing Authentication

mukul975

Trigger machine account authentication for security testing.

Exploiting Constrained Delegation Abuse

mukul975

Leverage Kerberos misconfigurations for security testing.

Implementing Identity Verification for Zero Trust

mukul975

Enhance security with risk-adaptive identity verification.

Conducting Domain Persistence with DCSync

mukul975

Execute DCSync attacks for domain persistence testing.

Exploiting noPac CVE-2021-42278/42287

mukul975

Escalate privileges in Active Directory environments securely.

Building C2 Infrastructure

mukul975

Deploy and harden a Sliver C2 server for red team operations.

Exploiting Zerologon Vulnerability

mukul975

Exploit the critical Zerologon vulnerability for security testing.

Conducting Full-Scope Red Team Engagement

mukul975

Simulate advanced threats to test your security posture.

Exploiting Insecure Data Storage

mukul975

Identify vulnerabilities in mobile data storage.

Hunting for WMI Persistence

mukul975

Detect and analyze WMI-based persistence mechanisms.

Active Directory Attacks

sickn33

Comprehensive techniques for AD penetration testing.

Detecting Command and Control Over DNS

mukul975

Identify C2 traffic tunneled via DNS for enhanced security.