vuln-exploit-technique

Fail

Audited by Socket on Nov 13, 2026

3 alerts found:

SecurityMalwarex2
SecurityMEDIUM
SKILL.md

This is an explicitly offensive exploitation skill, not a benign general-purpose developer skill. Its exploit execution, reverse-shell, credential theft, persistence, and lateral-movement examples exceed its claimed initial-access boundary and enable consequential actions without a per-action approval requirement. No confirmed credential exfiltration endpoint or malicious installer is present, but the operational scope is high risk.

Confidence: 97%Severity: 91%
MalwareHIGH
references/manual-exploit-dev.md

The provided code fragment is an offensive exploitation scaffold: it connects to a remote host, receives a banner, constructs an overflow-style payload, and transmits it directly to the target. The surrounding context emphasizes return-address/shellcode injection and reverse-shell/payload handling, making the overall intent highly malicious/weaponized. If found inside any distributed dependency, it should be treated as extreme supply-chain risk (likely containing or enabling exploitation of remote services).

Confidence: 90%Severity: 95%
MalwareHIGH
references/framework-exploitation.md

The provided fragment is a comprehensive, actionable offensive exploitation workflow for Metasploit/Meterpreter and msfvenom. It explicitly covers scanning/brute-force, exploitation, reverse/bind payload delivery, interactive post-exploitation, credential harvesting, lateral movement, and optional persistence—capabilities strongly aligned with malware and real-world unauthorized compromise. No obfuscation is present, but the content is inherently high risk if included in a software supply-chain artifact.

Confidence: 90%Severity: 100%
Audit Metadata
Analyzed At
Nov 13, 2026, 12:38 PM
Package URL
pkg:socket/skills-sh/aeondave%2Fmalskill%2Fvuln-exploit-technique%2F@9dd9ebf2abcab0bef7e0c6ed97b47c440c7bbe84fbebe3b0571013b28fea1d51