The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides payloads and commands for testing known vulnerabilities such as Spring4Shell (CVE-2022-22965), Spring Cloud Function SpEL injection (CVE-2022-22963), and H2 console exploitation to achieve code execution on a target system.
[DATA_EXFILTRATION]: Instructions are provided for downloading JVM heap dumps (/actuator/heapdump) and enumerating environment variables (/actuator/env) to extract sensitive information like passwords, API keys, and tokens from memory.
[COMMAND_EXECUTION]: The skill makes extensive use of curl and grep to fingerprint services and probe for exposed Actuator endpoints. It also includes instructions for using python3 -m json.tool to format and analyze JSON responses from the target.
[REMOTE_CODE_EXECUTION]: Automated scans flagged curl ... | python3 patterns as suspicious. However, manual review confirms these are used legitimately for JSON parsing (python3 -m json.tool) rather than executing remote Python scripts.

hunt-springboot