The Agent Skills Directory

[DATA_EXFILTRATION]: The skill documents numerous sensitive file paths intended for target discovery and data theft. Examples include SSH private keys (/root/.ssh/id_rsa), password databases (/etc/shadow, SAM), and configuration files containing credentials (wp-config.php).
[REMOTE_CODE_EXECUTION]: The instructions describe methods to achieve code execution on a target server. This includes log poisoning techniques (injecting PHP code into web server or SSH logs) and the use of PHP wrappers like php://input or expect:// to execute arbitrary system commands.
[COMMAND_EXECUTION]: The skill provides executable command examples for exploitation and fuzzing. It includes curl payloads for retrieving sensitive files and instructions for using automated tools like ffuf and wfuzz to discover vulnerabilities.

file-path-traversal