The Agent Skills Directory

[SAFE]: The skill is a static documentation resource and contains no active scripts or executable malicious code.
[COMMAND_EXECUTION]: The documentation in references/command-execution.md and references/checklists/command-execution-checklist.md contains extensive libraries of shell payloads and reverse shell examples (Bash, Python, Perl, etc.) for testing purposes. These are clearly marked as reference material for authorized security audits.
[DATA_EXFILTRATION]: The skill identifies sensitive file paths like /etc/passwd, /etc/shadow, and SSH private keys as common targets for path traversal and information disclosure testing, providing methodology for identifying these risks.
[SQL_INJECTION]: Includes a massive repository of SQL injection payloads and bypass techniques for MySQL, MSSQL, Oracle, and Access, distilled from historical vulnerability data.
[PERSISTENCE]: Documents persistence techniques like writing SSH keys to Redis or using cron jobs, presented as part of an exploitation methodology for security researchers to identify and remediate.

wooyun-legacy