{
  "rev": "c8e44973851eb28fbe5ee63dfbfd58ca85a4b669",
  "version": "0-unstable-2026-10-23",
  "hash": "51pQC+WBMPc3buJWo0MFo3jISduGH/q3YP1GYdN0Wfo=",
  "paths": {
    "skills": ["_template", "ctf", "legacy", "retrospective"],
    "skills/ad": ["acl-abuse", "ad-discovery", "ad-persistence", "adcs-access-and-relay", "adcs-persistence", "adcs-template-abuse", "auth-coercion-relay", "credential-dumping", "gpo-abuse", "kerberos-delegation", "kerberos-roasting", "kerberos-ticket-forging", "pass-the-hash", "sccm-exploitation", "trust-attacks"],
    "skills/credential": ["password-spraying"],
    "skills/evasion": ["av-edr-evasion"],
    "skills/network": ["container-escapes", "database-enumeration", "infrastructure-enumeration", "network-recon", "pivoting-tunneling", "remote-access-enumeration", "smb-enumeration", "smb-exploitation", "xmpp-enumeration"],
    "skills/post-exploit": ["credential-recovery"],
    "skills/privesc": ["linux-cron-service-abuse", "linux-discovery", "linux-file-path-abuse", "linux-kernel-exploits", "linux-sudo-suid-capabilities", "windows-credential-harvesting", "windows-discovery", "windows-kernel-exploits", "windows-service-dll-abuse", "windows-token-impersonation", "windows-uac-bypass"],
    "skills/research": ["unknown-vector-analysis"],
    "skills/web": ["2fa-bypass", "ajp-ghostcat", "browser-exploitation", "command-injection", "cors-misconfiguration", "csrf", "deserialization-dotnet", "deserialization-java", "deserialization-php", "file-upload-bypass", "idor", "jwt-attacks", "ldap-injection", "lfi", "nosql-injection", "oauth-attacks", "password-reset-poisoning", "php-code-injection", "python-code-injection", "race-condition", "request-smuggling", "smb-share-webshell", "source-code-review", "sql-injection-blind", "sql-injection-error", "sql-injection-stacked", "sql-injection-union", "ssrf", "ssti-freemarker", "ssti-jinja2", "ssti-twig", "tomcat-manager-deploy", "web-discovery", "xss-dom", "xss-reflected", "xss-stored", "xxe"]
  }
}