4. Security & Compliance

Guides users in performing Shodan reconnaissance for penetration testing, including scanning exposed devices and identifying vulnerable services.

Automates code audits to identify security flaws, bugs, and deviations from coding best practices in software development.

Provides techniques for identifying, exploiting, and understanding SQL injection vulnerabilities across database systems.

Provides structured ethical hacking methodology covering penetration testing lifecycle, reconnaissance, vulnerability scanning, and report writing.

Performs SMTP server security assessments including user enumeration, open relay testing, banner grabbing, and credential brute-forcing.

Provides cloud security assessment techniques for AWS, Azure, and GCP, including penetration testing, misconfiguration exploitation, and infrastructure auditing.

Guides configuration and testing of network services including web servers, HTTP/HTTPS, SNMP, and SMB for penetration testing environments.

Enforces Next.js data security best practices, including Data Access Layer, Tainting, and Zero Trust architecture.

Offers red team and bug bounty methodologies for security reconnaissance and vulnerability discovery.

Guides automated SQL injection testing and database vulnerability exploitation using SQLMap.

Provides ethical hacking guidance on privilege escalation techniques like SUID abuse, Kerberoasting, and token impersonation for Linux and Windows systems.

Provides comprehensive SSH penetration testing methodologies including vulnerability exploitation, configuration enumeration, and security auditing.

Guides discovery and exploitation of Windows privilege escalation vulnerabilities, including enumeration and post-exploitation techniques.

Offers essential command references for penetration testing tools including nmap, metasploit, and nikto.

Provides techniques for identifying and exploiting Linux privilege escalation vectors, including SUID binaries, sudo misconfigurations, and cron jobs.

Provides expert guidance on security scanning tools and methodologies for vulnerability assessment, network scanning, and compliance evaluation.

Guides users in Metasploit Framework usage for penetration testing, exploit development, and post-exploitation activities.

Analyzes regulatory landscapes, compliance requirements, and legal considerations to help users navigate industry regulations and risks.

Provides comprehensive definitions, root causes, impacts, and mitigation strategies for web vulnerabilities aligned with OWASP taxonomy.

Provides best practices for implementing security headers (HSTS, CORS, CSP) to enhance web application security.

Provides security implementation for FastAPI endpoints including JWT authentication, encrypted payloads, audit logging, and OWASP compliance.

Manages user accounts within the MCP Hub system, including creation, permission updates, and status checks for secure access control.

Provides cryptographic utilities for client-side encryption, key management, and secret storage in KeyArc, ensuring server-side plaintext secrecy.

Assesses and hardens Kubernetes/OpenShift clusters for security compliance, covering RBAC, network policies, secrets management, and vulnerability scanning against CIS benchmarks.