race-condition-exploit
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Bash scripts in
references/multi-step-race.mdandreferences/race-scripts.mddesigned to perform concurrent network requests and filesystem manipulations. - [PRIVILEGE_ESCALATION]: A detailed symlink race exploit script is provided in
references/multi-step-race.mdwhich targets SUID programs to write malicious entries into sensitive system directories like/etc/cron.d/. - [REMOTE_CODE_EXECUTION]: Functional Python scripts in
references/race-scripts.mdandreferences/turbo-intruder-scripts.mdfacilitate the exploitation of race conditions, including a scenario for uploading and executing commands via a PHP webshell. - [DATA_EXFILTRATION]: Multiple scripts are included that perform automated, high-frequency network operations to exploit logic flaws in financial or inventory-based web applications.
Recommendations
- AI detected serious security threats
Audit Metadata