smb-pentesting

该技能没有明显隐藏安装器、恶意第三方数据中转或伪装取证；静态扫描的 .config 发现大概率是文档误报。但它本质上是面向 AI agent 的 SMB 渗透与利用手册，直接支持密码攻击、RCE、凭据提取和横向移动，因此不是恶意窃密器，却是高风险攻击能力技能。

This artifact is best characterized as an attacker-oriented SMB exploitation and credential theft/relay playbook packaged as documentation. It provides explicit, actionable steps and command examples for scanning and exploiting SMB vulnerabilities, coercing victim authentication (SMB Trap), capturing NetNTLMv2 credentials (Responder), relaying them (ntlmrelayx), cracking hashes, and using them for further remote execution. No obfuscation is present; the maliciousness signal is the operational offensive content itself. If included in a software dependency, it should be treated as a serious supply-chain compromise/misuse risk and investigated/removed.