The Agent Skills Directory

[DATA_EXFILTRATION]: Provides automated scripts and a functional HTML payload specifically designed to harvest and exfiltrate PII (names, email addresses) and sensitive configuration data.
The skill includes regex patterns to extract database passwords, API keys, and customer details from exposed debug logs and contact form storage.
A browser-based exfiltration payload is provided in the reference catalog to steal user and post data from WordPress sites via credentialed CORS requests.
[COMMAND_EXECUTION]: Utilizes high-risk execution patterns that pipe remote network responses directly into interpreters.
The skill uses curl ... | python3 -c "..." to process JSON data from remote sources like crt.sh and WordPress REST APIs.
Shell loops execute commands like curl and exiftool using variables derived from target websites, which may be susceptible to injection if inputs are not properly sanitized.
[EXTERNAL_DOWNLOADS]: Automatically fetches and saves files from remote target servers and third-party services during execution.
Downloads images from target galleries for metadata analysis using exiftool to extract geolocation and device info.
Retrieves logs and backup files from predictable paths on shared hosting environments.
[CREDENTIALS_UNSAFE]: Contains logic specifically optimized for locating and extracting credentials from target environments.
Includes targeted searches for DB_PASSWORD, DB_USER, and various secret tokens in sensitive files retrieved from targets.

recon-smb-services