deserialization-dotnet

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs use and embedding of sensitive values (machine keys, validation/decryption keys, payloads, discovered credentials/tokens) in commands, evidence files, and the return summary, which requires the LLM to handle and output secret values verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The set is suspicious because it includes an attacker-controlled direct link to a PowerShell script (http://ATTACKER/shell.ps1), which is a direct executable/script download commonly used to deliver and run malware; the remaining URLs are target endpoints (endpoints, ViewState/page.aspx, proof.txt) used in exploitation but are not safe download sources.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document is a high-risk, step-by-step offensive playbook that explicitly instructs how to achieve remote code execution via .NET deserialization (ViewState/JSON/BinaryFormatter/SoapFormatter), perform credential harvesting (machine keys, web.config), exfiltrate data (DNS callbacks, upload to attacker servers), write persistence/proof files, and evade detection—all clear indicators of deliberate malicious/abusive use despite the "pentest" framing.