payloads-ssi
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of external security tooling and command-line execution for vulnerability research purposes.
- Provides examples for running
SSTImapusingpython3 ./sstimap.pywith various flags. - Lists shell-based payloads for SSI exploitation, including directory listing (
ls) and reverse shell creation usingmkfifoandnc. - [DATA_EXFILTRATION]: Includes educational payload examples demonstrating how sensitive data can be accessed or exfiltrated during a security audit.
- Contains payloads for accessing system files such as
/etc/passwdvia the SSI#includedirective. - Provides ESI payloads for simulating cookie theft and blind data exfiltration to external domains.
- [OBFUSCATION]: Contains a Base64-encoded placeholder within a tool usage example.
- The string
bG9naW46c2VjcmV0X3Bhc3N3b3Jkis used in a Basic Authentication header example. - Decoded value is
login:secret_password, which is a benign instructional placeholder.
Audit Metadata