msf-oneshot
Audited by Socket on Sep 23, 2026
3 alerts found:
Securityx2MalwareSUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with its stated purpose, but that purpose is to equip an AI agent with offensive exploitation and post-exploitation operations against remote systems. No strong malware or covert exfiltration from the skill itself, yet the enabled behavior is inherently dangerous and disproportionate for general agent use.
该文件是 Metasploit 后渗透与会话管理操作文档,不包含直接执行恶意行为的程序代码或明确的数据外传逻辑。其示例覆盖提权、凭据提取、端口转发、SOCKS 代理、Pass-the-Hash、远程执行和备用回连,若用于未授权目标将具有较高攻击风险。应仅在明确授权的测试环境中使用,并限制网络范围、凭据访问和持久化回连能力。
This JSON fragment is not legitimate library/runtime code; it is an actionable offensive instruction specification for Metasploit-based exploitation and post-exploitation. It provides direct guidance for running known exploit tooling, generating reverse-shell executables, and achieving OS command execution via database credential abuse. If incorporated into a production workflow, it would meaningfully enable unauthorized compromise and remote shell access.