sccm-exploitation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to extract, decrypt, save, and report credentials/tokens (e.g., NetworkAccessUsername/Password, PXE hashes, DB secrets) and shows commands embedding plaintext credentials (e.g., -u 'user' -p 'Password123'), which requires the LLM to handle and output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document explicitly instructs how to perform deliberate offensive actions against SCCM/MECM — including credential theft (NAA/DPAPI/SC_UserAccount), covert exfiltration (PXE hashes, policy blobs), NTLM relays to obtain DB sysadmin, remote code execution via malicious application deployment, and database/AD manipulation to establish persistent/admin access — all clear high-risk backdoor and exfiltration techniques.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Step 2/3/4/5/6/7/8 include runtime ingestion of outsider-authored free text from remote SCCM/MP/DP endpoints (e.g., curl to http://MP01.../SMS_MP/.sms_aut?... and parsing policy XML/variables.dat fetched from infrastructure), which is not authored by the operating user and can contain attacker-controlled text that the workflow then places into the agent/LLM context via extracted outputs (e.g., cat /tmp/naapolicy.xml | grep ... and evidence printing).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly directs creation of machine/accounts and SCCM admin entries, modification of system files (e.g., /etc/hosts), and execution of privileged operations (sudo pxethiefy, sudo ntpdate) and database inserts—actions that change host/domain state and require elevated privileges.