payloads-ssi

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of external security tooling and command-line execution for vulnerability research purposes.
  • Provides examples for running SSTImap using python3 ./sstimap.py with various flags.
  • Lists shell-based payloads for SSI exploitation, including directory listing (ls) and reverse shell creation using mkfifo and nc.
  • [DATA_EXFILTRATION]: Includes educational payload examples demonstrating how sensitive data can be accessed or exfiltrated during a security audit.
  • Contains payloads for accessing system files such as /etc/passwd via the SSI #include directive.
  • Provides ESI payloads for simulating cookie theft and blind data exfiltration to external domains.
  • [OBFUSCATION]: Contains a Base64-encoded placeholder within a tool usage example.
  • The string bG9naW46c2VjcmV0X3Bhc3N3b3Jk is used in a Basic Authentication header example.
  • Decoded value is login:secret_password, which is a benign instructional placeholder.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 11:50 PM