hunt-ldap

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly describes blind exfiltration of password/hash attributes and includes scripts that reconstruct and echo recovered secrets (char-by-char recovery loop and ldapsearch using -w "$PW"), which requires outputting secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive playbook describing LDAP/XPath injection payloads, automated auth‑bypass and blind exfiltration techniques, and OOB callbacks targeted at stealing credentials and directory data — clearly intended for unauthorized exploitation.