conducting-pass-the-ticket-attack
票据传递(Pass-the-Ticket,PtT)是一种横向移动技术,使用窃取的 Kerberos 票据(TGT 或 TGS)在不知道用户密码的情况下向服务进行认证。通过从已控制的主机内存中提取 Kerberos 票据,攻击者可以将这些票据注入自己的会话以模拟票据所有者。
票据传递(Pass-the-Ticket,PtT)是一种横向移动技术,使用窃取的 Kerberos 票据(TGT 或 TGS)在不知道用户密码的情况下向服务进行认证。通过从已控制的主机内存中提取 Kerberos 票据,攻击者可以将这些票据注入自己的会话以模拟票据所有者。
Adds a new procedural license function to src/cpanel.inc.php following the existing pattern: create Cpanel instance, make API call, log with request_log and myadmin_log, return result. Use when user says 'add license function', 'new cpanel function', 'add API wrapper'. Do NOT use for Plugin.php class methods.
BML Connect (Bank of Maldives) payment API integration guide. Use this skill whenever the user mentions BML Connect, Bank of Maldives payments, MVR transactions, MobilePay integration, Maldivian payment processing, laari currency, or wants to accept payments in the Maldives. Also trigger when you see BML API keys, `/public/v2/transactions`, `/public-customers`, or any reference to merchants.bankofmaldives.com.mv. Even if the user just says "add payments" or "integrate a payment gateway" in a Maldivian context, this skill applies.
Stripe payments via uni CLI. Use when user wants to check balance, create payment links, manage customers, invoices, refunds, or subscriptions. Requires STRIPE_SECRET_KEY or run 'uni stripe auth'.
Find and cancel unwanted subscriptions by analyzing bank transactions. Detects recurring charges, calculates annual waste, and helps you cancel with direct URLs and browser automation. Use when: 'cancel subscriptions', 'audit subscriptions', 'find recurring charges', 'what am I paying for', 'save money', 'subscription cleanup', 'stop wasting money'. Supports CSV import (Apple Card, Chase, Amex, Citi, Bank of America, Capital One, Mint, Copilot) OR Plaid API for automatic transaction pull. Outputs interactive HTML audit with one-click cancel workflow. Pairs with Plaid integration for real-time transaction access without CSV exports.
乙方将本机技能以「单次收费服务」形式发布到链上的技能;使用 skill-service 协议,供服务市场展示与后续甲方付费使用。
Interact with the VALR cryptocurrency exchange API. Handles authentication (HMAC-SHA512 signing), account balance queries, market data retrieval, spot order placement, perpetual futures trading, fee queries, VALR Pay (instant P2P payments), crypto deposits and withdrawals, and more. TRIGGER when: the user mentions VALR, VALR API, or asks to trade, check balances, retrieve market data, query fees or trading costs, manage futures positions, send/receive VALR Pay payments, deposit or withdraw crypto, or check deposit/withdrawal status on VALR. DO NOT TRIGGER for: other exchanges (Binance, Coinbase, Kraken, etc.) or general crypto questions not involving VALR.
Real-time price alerts via WebSocket streams. Monitors crypto prices (Binance) and triggers alerts when thresholds are crossed. Used for automated trading position management.
Set territory-specific pricing for subscriptions and in-app purchases using current asc setup, pricing summary, price import, and price schedule commands. Use when adjusting prices by country or implementing localized PPP strategies.
Anmeldung、Finanzamt登録、健康保険加入、社会保障調整を含むDACH固有の行政手続き のステップバイステップガイダンス。DACH諸国に到着して必須登録を完了する必要が ある時、特定のアポイントの前に何を期待するかを理解したい時、初回の登録が却下 された時、DACH諸国間を移動する時、または自身の登録と共に扶養家族の登録を 処理する時に使用する。
Senior Payment Solutions Architect for Stripe (2026). Specialized in secure checkout flows, complex billing models (usage-based/hybrid), global tax compliance via Stripe Tax, and high-performance Next.js 16 integration. Expert in building PCI-compliant, idempotent, and resilient payment systems using Checkout Sessions, Payment Elements, and Server Actions.
Génère les interfaces de contrats pour une architecture Elegant Objects
This skill should be used when the user asks to "start a new project", "greenfield project", "tech debt campaign", "incident response", "feature development", "which preset", "initialize metis", "set up project", or needs guidance on project setup, choosing presets, and applying patterns for different work types.
Discovers differentiated market positioning using 8 proven frameworks. This skill should be used when launching a new product or service, entering competitive markets, refreshing stale positioning, or when current messaging sounds like every other competitor.
Generates compliance documentation for regulated projects. Use when setting up FSS, ISMS, PCI DSS, or other regulatory compliance documents.
This skill should be used when analyzing market breadth charts, specifically the S&P 500 Breadth Index (200-Day MA based) and the US Stock Market Uptrend Stock Ratio charts. Use this skill when the user provides breadth chart images for analysis, requests market breadth assessment, positioning strategy recommendations, or wants to understand medium-term strategic and short-term tactical market outlook based on breadth indicators. All analysis and output are conducted in English.
This skill should be used when analyzing weekly price charts for stocks, stock indices, cryptocurrencies, or forex pairs. Use this skill when the user provides chart images and requests technical analysis, trend identification, support/resistance levels, scenario planning, or probability assessments based purely on chart data without consideration of news or fundamental factors.
PPM system for resource allocation, budget tracking, and portfolio analytics
Build defensible DCF models with cited sources, Excel export, and sensitivity analysis