padbuster-padding-oracle

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to embed ciphertexts/cookie values directly into commands/requests (e.g., -cookies "auth=BASE64_CIPHER" or passing the encrypted token as a CLI argument), which requires outputting secret/token values verbatim and thus poses exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This documentation describes an automated padding-oracle exploitation tool (PadBuster) that intentionally decrypts CBC-encrypted tokens and forges valid ciphertexts (e.g., admin cookies/JSON), enabling credential theft, unauthorized data access, and privilege escalation.