The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of system shell commands including curl, python3, jq, grep, and tee to automate network requests and process target responses.
[DATA_EXFILTRATION]: Specifically targets the retrieval of sensitive remote files such as wp-config.php.bak, wp-config.php~, and debug.log. These files frequently contain database connection strings, authentication salts, and other sensitive system information.
[CREDENTIALS_UNSAFE]: Includes commands for active credential-based attacks, including XML-RPC brute-forcing using placeholder credentials and the automated use of session cookies ($COOKIE) for testing cross-origin resource sharing (CORS) vulnerabilities.
[REMOTE_CODE_EXECUTION]: Employs high-risk patterns where data from remote endpoints (including certificate transparency logs and target WordPress APIs) is piped directly into a Python interpreter (curl ... | python3). This pattern of processing untrusted remote content through a dynamic interpreter is a significant security risk.
[EXTERNAL_DOWNLOADS]: Fetches certificate information from the public crt.sh service to perform subdomain mapping for the target organizations.

recon-churches