The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone the php_filter_chain_generator repository from Synacktiv's official GitHub account. This is a legitimate security tool from a reputable organization used for generating payloads.
[COMMAND_EXECUTION]: Multiple local system commands, such as git, python3, curl, ssh, and zip, are utilized to generate exploitation chains and interact with target environments during a penetration test.
[REMOTE_CODE_EXECUTION]: The skill provides procedures for obtaining remote code execution on the target application being tested. These techniques, including log poisoning and PHP filter chains, are standard penetration testing methods.
[DATA_EXFILTRATION]: Guidance is provided for identifying and reading sensitive target files, such as /etc/passwd and SSH keys. Extracted data is saved locally to the ./engagement/evidence/ directory for assessment documentation.

lfi