594 skills · sorted by relevance
Analyze suspicious Linux ELF executables through file inspection, runtime tracing, and reverse engineering. Identify malware behavior, network destinations, and persistence mechanisms, then organize findings and indicators for investigations involving servers, containers, or cloud infrastructure.
Diagnose Fedora Linux problems with a structured troubleshooting plan. Get commands for checking services, logs, and packages, followed by remediation, validation, and rollback steps that account for SELinux and firewalld where relevant.
Inspect Linux scheduled tasks, services, shell profiles, shared library settings, and SSH keys for mechanisms that maintain attacker access. Correlate findings with audit logs to produce a timeline, risk scores, and remediation commands.
Investigate Linux intrusions using auditd records. Configure audit rules, search events with ausearch, summarize activity with aureport, reconstruct a timeline of suspicious actions, and forward logs to a central security monitoring system.
Acquire Linux memory with LiME and examine it using Volatility 3. Extract processes, network connections, command history, loaded kernel modules, and signs of injected code to support investigations of compromised Linux systems.
Examine Linux authentication logs, shell history, SSH keys, scheduled tasks, and system settings to investigate a compromise. Help reconstruct activity, identify ways attackers maintain access, and document suspicious accounts, files, and configuration changes.
Investigate how a limited Linux account could gain root, the system administrator's privileges. The skill guides checks of permissions, scheduled tasks, services, and known vulnerabilities, while outlining evidence defenders can monitor during authorized security assessments.
Diagnose Arch Linux problems by reviewing recent updates, service logs, and packages. Get a step-by-step investigation plan, ready-to-copy repair commands, verification steps, and guidance for rollback or cleanup.
Investigate Linux kernel rootkits, malware that hides inside the operating system's core. Analyze memory dumps with Volatility3, compare system views, and run live scans to identify hidden modules, altered calls, and suspicious inconsistencies.
Trace SSH keys, tokens, and other credentials in Linux CTF environments. Connect each recovered artifact to the service that accepts it, then document the resulting privileges or movement to another host.
Guide desktop actions on a connected Linux computer using accessibility information that identifies buttons and fields. It covers checking keyboard focus, verifying results with screenshots, and handling limitations in XWayland apps and remote desktop viewers.
Diagnose CentOS problems using service status, logs, and RHEL-compatible commands. Get remediation commands, checks after major changes, and rollback steps, with attention to SELinux access controls and the firewalld firewall where relevant.
Build and manage Linux containers on Apple silicon Macs with Apple's container CLI. Run each container in its own lightweight virtual machine, and get guidance on images, networking, storage, and translating familiar Docker workflows to this tool.
Use Bash on macOS or Linux for file searches, log inspection, text processing, and process checks. Apply command chaining, pipes that pass text between commands, environment variables, and error handling when writing scripts.
Build C++ applications for custom Zoom video sessions on Linux, including bots that run without a display. Get guidance on capturing and supplying raw audio and video, connecting Qt or GTK interfaces, and configuring Docker environments.
Review how evidence can be altered during authorized security exercises on Windows and Linux. Covers logs, timestamps, memory, disk records, and network traces, alongside the signs defenders use to detect manipulation.
Investigate Debian Linux issues through service checks, logs, and package tools. Receive repair commands, verification steps, and rollback guidance, with attention to AppArmor security restrictions or firewall settings when relevant.
Helps manage and troubleshoot Linux, macOS, and Windows systems. Guides checks of CPU, memory, disks, networks, and logs, then supports service configuration and security hardening with explanations suited to the operating system.
Helps configure and troubleshoot Linux networks, including firewalls, routing, and DNS, which translates domain names into addresses. Covers traffic capture, isolated test networks, WireGuard VPN setup, and TCP tuning across physical servers, virtual machines, and containers.
Plan persistence testing for authorized Windows and Linux security exercises, examining how access can survive logons or restarts. The skill compares mechanisms by privilege level and environment, with validation steps, detection indicators, and cleanup considerations.
Verify OpenClaw installation, onboarding, gateway operation, and upgrades in Parallels virtual machines running macOS, Windows, or Linux. The skill guides baseline restoration, bounded test runs, log interpretation, and focused retries when checks fail.
Diagnose network errors and intermittent connections on routers, switches, and Linux hosts. Compare both ends of a link and changes in error counts to distinguish cable faults, congestion, and mismatched speed or communication settings.
Create and review Docker development environments, including service networking, persistent storage, and security settings. Also guides isolated testing of command-line installers on Linux, while identifying checks that require native macOS or Windows environments.
Guide reviews of Linux Kernel patches for memory safety, Terraform plans for costly resource changes, and Kubernetes configurations for restricted permissions. A separately installed tool and configured AI model produce advisory findings and candidate manifests for validation.