exploiting-zerologon-vulnerability-cve-2020-1472

Warn

Audited by Socket on Sep 15, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent and does not appear deceptive, but it is a high-risk offensive security skill that enables unauthenticated domain compromise, credential dumping, and privileged remote execution. Tool provenance is mostly legitimate, with some weaker trust around community exploit scripts, but the main issue is that the skill gives an AI agent actionable exploitation capability against real targets.

Confidence: 92%Severity: 90%
SecurityMEDIUM
references/workflows.md

No executable malware or embedded supply-chain payload is present in the supplied text. The material is an explicit offensive Zerologon exploitation and credential-theft workflow. It presents substantial security risk if used without authorization, although malware probability is low because no executable implementation or automatic behavior is included.

Confidence: 99%Severity: 86%
Audit Metadata
Analyzed At
Sep 15, 2026, 06:03 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fexploiting-zerologon-vulnerability-cve-2020-1472%2F@85b2c341daf303e5a020ee8dc7b35ec9e168a7f273851d05b07a9295e3d422ad