The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides a comprehensive guide and dedicated tooling (ingressnightmare) to exploit a vulnerability chain (CVE-2025-1974) that leads to unauthenticated Remote Code Execution on Kubernetes Ingress-NGINX admission controllers.
[CREDENTIALS_UNSAFE]: Instructions explicitly guide the user to access and exfiltrate highly sensitive Kubernetes ServiceAccount tokens from the standard path /var/run/secrets/kubernetes.io/serviceaccount/token to facilitate lateral movement and cluster-wide privilege escalation.
[DYNAMIC_EXECUTION]: The skill details a technique to compile C code into shared objects (.so) at runtime and inject them into a running process via the NGINX ssl_engine directive. It provides specific compilation commands for different architectures (x86_64 and aarch64) using gcc and aarch64-linux-gnu-gcc.
[EXTERNAL_DOWNLOADS]: The skill recommends using f8x -cloud to install offensive security tools. This command typically involves fetching and executing third-party scripts from external repositories to provision a penetration testing environment.
[COMMAND_EXECUTION]: The skill utilizes numerous powerful CLI tools, including nmap for network reconnaissance, kubectl for internal cluster probing, and curl for interacting with Admission Webhooks and triggering the vulnerability.

k8s-ingress-nightmare