web-exploits

SUSPICIOUS/HIGH-RISK skill. The scanner findings themselves are mostly documentation artifacts, but the skill’s stated purpose is to equip an AI agent with offensive web exploitation and RCE techniques, including webshell usage and exfiltration payloads. It is coherent with its purpose, but that purpose is an exploit capability and therefore high security risk rather than malware.

This is an active upload-validation testing script with potentially harmful web-shell payloads. It does not itself execute commands or demonstrate stealth, data theft, or persistence, but using it against an unauthorized target could enable remote code execution if the target accepts and executes an uploaded payload. Restrict use to authorized testing.

This is an explicit reverse shell. If executed in an environment where the destination is reachable, it provides remote shell access and is highly dangerous.

This is an unauthenticated remote webshell that executes attacker-supplied shell commands and returns their output. It poses an extreme security risk and should not be deployed or used.