middleware-tactics

该技能与其声明目的高度一致，但声明目的本身就是让 AI 代理对中间件实施漏洞利用、弱口令尝试和 webshell 部署。未见明显凭据外传或可疑安装器，因此更像高风险攻击技能而非窃密型恶意载荷；整体应判定为 SUSPICIOUS，且安全风险很高。

This is a static evaluation-data fragment, not executable code. It contains actionable exploitation instructions for Tomcat and IIS, but no evidence of malware behavior, data exfiltration, or system effects within the fragment itself.