Skills by hypnguyen1209
-
browser-exploitation
MIT· ★ 326 · updated 2026-07-03 — Weaponize client-side browser vulnerabilities into full host compromise by chaining JS-engine bugs through multiple sandbox layers. This skill covers V8 and JavaScriptCore…
-
cloud-security
MIT· ★ 326 · updated 2026-07-03 — Cloud Security targets identity and access control weaknesses across major cloud platforms. It covers IAM privilege escalation, credential harvesting via metadata SSRF, Entra…
-
crypto-analysis
MIT· ★ 326 · updated 2026-07-03 — Crypto-analysis evaluates cryptographic posture across TLS/SSL/SSH configurations, public-key implementations, and token schemes. It detects cipher downgrades, weak key…
-
edr-evasion
MIT· ★ 326 · updated 2026-07-03 — EDR Evasion covers defensive bypass methods used in red team engagements, from userland hook removal and direct syscall execution to AMSI patching and memory encryption. Learn how…
-
exploit-development
MIT· ★ 326 · updated 2026-07-03 — Build weaponized proof-of-concept exploits from confirmed vulnerabilities, constructing reliable primitive chains (leak → read/write → control flow) across userland binaries,…
-
incident-response
MIT· ★ 326 · updated 2026-07-03 — Incident Response guides evidence collection and analysis during active security breaches across endpoints, memory, logs, and cloud environments. It covers triage acquisition with…
-
malware-analysis
MIT· ★ 326 · updated 2026-07-03 — Malware Analysis guides you through identifying unknown binaries, unpacking obfuscated loaders, and safely detonating samples to recover fileless artifacts and in-memory payloads.…
-
mobile-pentest
MIT· ★ 326 · updated 2026-07-03 — Mobile-pentest guides dynamic analysis of Android and iOS applications through Frida-based instrumentation, certificate pinning circumvention, and detection bypass. It covers…
-
privesc-windows
MIT· ★ 326 · updated 2026-07-03 — privesc-windows guides you through multiple privilege-escalation paths on Windows hosts, from token-impersonation attacks (GodPotato, SigmaPotato, PrintNotifyPotato) and UAC…
-
reverse-engineering
MIT· ★ 326 · updated 2026-07-03 — Reverse Engineering provides techniques and tools for static and dynamic analysis of compiled binaries, firmware, and protected code. Recover decompiled source, unpack obfuscated…
-
shellcode-dev
MIT· ★ 326 · updated 2026-07-03 — Shellcode-dev guides you through building position-independent code for implant delivery, covering PEB walking for API resolution, ROR13 hashing, and null-byte elimination. It…
-
threat-hunting
MIT· ★ 326 · updated 2026-07-03 — Threat Hunting equips you to conduct hypothesis-driven threat investigations across Windows endpoints, network traffic, and cloud identity using Sigma-based detection rules, MITRE…
-
windows-boundaries
MIT· ★ 326 · updated 2026-07-03 — Windows Boundaries equips you with techniques and tools to cross Windows security boundaries—from kernel/user mode transitions via win32k/dxgkrnl exploits and BYOVD drivers, to…
-
windows-mitigations-bypass
MIT· ★ 326 · updated 2026-07-03 — This skill maps techniques for defeating Windows exploit mitigations—memory protections like ASLR, DEP, CFG, and CET—alongside platform security controls including WDAC, ASR,…