Fähigkeiten pentest-metasploit
📦
pentest-metasploit
v0.1.0 Inhaltsrevision r1 Kritisch ⚙️ Externe Befehle🌐 Netzwerkzugriff📁 Dateisystemzugriff🔑 Umgebungsvariablen⚡ Enthält Skripte
Metasploit-Workflows sicher prüfen
Sicherheitsteams benötigen eine strukturierte Prüfung autorisierter Exploit-Validierung, doch diese Workflows bergen ein hohes Missbrauchsrisiko. Dieser Skill dokumentiert Metasploit-Bewertungsschritte mit Umfangsprüfungen, Protokollierung und Anleitung zur Bereinigung.
Unterstützt: Claude Codex Code(CC)
Diesen Skill nicht automatisch installieren.
Die maßgebliche Richtlinie verlangt vor jeder Installationsaktion eine Prüfung durch einen Bediener.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Agent-Anfrage
Review the Skillstore skill "pentest-metasploit" from https://skillstore.io/skills/agentsecops-pentest-metasploit.md and its manifest at https://skillstore.io/api/skills/agentsecops-pentest-metasploit/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„pentest-metasploit“ wird verwendet. Validierung für einen autorisierten SMB-Befund planen.
Erwartetes Ergebnis:
Eine eingegrenzte Checkliste zu Autorisierung, Testfenster, Zielliste, Sicherheitsprüfungen, erwarteter Evidenz, Bereinigung und Eskalationskontakten.
„pentest-metasploit“ wird verwendet. Post-Exploitation-Evidenz für einen Bericht zusammenfassen.
Erwartetes Ergebnis:
- Eine knappe Auswirkungsbeschreibung, die an das genehmigte Testziel gebunden ist.
- Eine Zeitleiste des beobachteten Zugriffs und der Aktionen.
- Bereinigungs- und Behebungshinweise für den Asset-Eigentümer.
„pentest-metasploit“ wird verwendet. Einen defensiven Erkennungsplan aus einem Payload-Szenario erstellen.
Erwartetes Ergebnis:
Ein Erkennungsplan mit erwarteten Protokollen, Netzwerksignalen, Endpoint-Warnungen, Validierungsschritten und Anleitung für Analystenreaktionen.
Sicherheitsaudit
Kritischv10 • 9.7.2026 Versionsbericht öffnen
The skill is not a passive reference; SKILL.md provides operational Metasploit workflows for exploit execution, Meterpreter sessions, credential collection, persistence, lateral movement, phishing payload delivery, evasion, and privilege escalation. Most rule-template and reference-example detections are documentation false positives, but the core skill content and CI pipe-to-shell template are confirmed high-risk or critical. No prompt-injection attempt was found in the reviewed files.
6
Gescannte Dateien
1,985
Analysierte Zeilen
50
Prüfelemente
0
Falschmeldungen ignoriert
Bestätigte Sicherheitsbedenken (63)
Kritisch
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads an install script from GitHub and pipes it directly to bash. This is a supply-chain execution path in CI.
Kritisch
Metasploit framework
name: pentest-metasploit
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
tags: [pentest, metasploit, exploitation, post-exploitation, vulnerability-validation, red-team]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
packages: [metasploit-framework]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
- https://docs.metasploit.com/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Kritisch
Metasploit framework
- https://www.offsec.com/metasploit-unleashed/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Kritisch
Metasploit framework
# Metasploit Framework Penetration Testing
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Alle 63 bestätigten Funde anzeigen
Kritisch
Metasploit framework
Metasploit Framework is the industry-standard platform for penetration testing, vulnerability valida
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
Initialize Metasploit console and verify database connectivity:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
# Initialize Metasploit database
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
# Launch Metasploit console
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
msf6 exploit(windows/smb/ms17_010_eternalblue) > set PAYLOAD windows/x64/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > sysinfo
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > getprivs
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > ipconfig
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > route
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run post/windows/gather/enum_av_excluded
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run post/windows/gather/enum_logged_on_users
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > migrate <stable-process-pid>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > getsystem
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run post/windows/gather/arp_scanner RHOSTS=<internal-subnet>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run auxiliary/scanner/smb/smb_version
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run autoroute -s <internal-subnet>/24
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
msf6 exploit(...) > set PAYLOAD linux/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
msf6 exploit(office_word_macro) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
msf6 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
# Headless Metasploit resource script
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
set PAYLOAD windows/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
Map Metasploit activities to ATT&CK framework:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
msf6 evasion(...) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
set PAYLOAD windows/meterpreter/reverse_https # staged
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
set PAYLOAD windows/meterpreter_reverse_https # stageless
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run post/windows/manage/migrate
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > getsystem -t 1 # Named Pipe Impersonation
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > getsystem -t 2 # Named Pipe Impersonation (Admin Drop)
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > getsystem -t 3 # Token Duplication
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
meterpreter > background
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
Organizations can detect Metasploit activity by:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
- **Network IDS**: Signature-based detection of default Metasploit payloads
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
- **Endpoint Detection**: Behavioral analysis of meterpreter process injection
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Kritisch
Metasploit framework
- [Metasploit Documentation](https://docs.metasploit.com/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Kritisch
Metasploit framework
- [Metasploit Unleashed](https://www.offsec.com/metasploit-unleashed/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Kritisch
Cobalt Strike keywords
- **Cobalt Strike**: Export sessions to Cobalt Strike beacons
The line describes exporting sessions to Cobalt Strike beacons. That is C2 and post-exploitation tradecraft integration guidance.
Kritisch
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The heuristic combination is present in the core skill: command execution, network pivoting, payload handling, and credential access are all documented. It is not a classic stealer, but the dangerous combination is real.
Kritisch
Operational Exploitation and Post-Exploitation Workflow
SKILL.md guides exploit configuration, reverse Meterpreter payload use, exploit execution, session interaction, credential collection, persistence, and privilege escalation. This goes beyond defensive explanation and can directly enable unauthorized compromise if misused.
The cited sections include concrete exploit, payload, Meterpreter, credential, persistence, and privilege escalation workflow text. The surrounding skill description confirms these are intended assessment procedures, not incidental references.
Kritisch
Phishing Payload Delivery Workflow
SKILL.md includes a pattern for generating a malicious Office macro document and setting up a handler for a reverse Meterpreter payload. This is social engineering payload delivery guidance, which static pattern matching only partially captured.
The section title and steps explicitly describe malicious document generation and listener setup. There is little ambiguity about the offensive delivery intent.
Kritisch
Evasion, C2 Handoff, and Covert Operations Guidance
SKILL.md discusses attribution prevention, encrypted callbacks, Cobalt Strike and PowerShell Empire handoff, evasion payload generation, and UAC bypass troubleshooting. These instructions can help avoid detection and extend compromise.
The cited text combines operational security, C2 framework integration, evasion, and privilege escalation instructions. These are high-confidence offensive tradecraft indicators in context.
Hoch
C2 keywords
- **Exfiltration**: T1041 (Exfiltration Over C2 Channel)
The C2 exfiltration mapping appears in a section that maps Metasploit activities to ATT&CK techniques. In context it supports offensive post-exploitation understanding.
Hoch
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
Hoch
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
Hoch
System reconnaissance
- **Attribution Prevention**: Avoid personal infrastructure or identifiable indicators
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
Hoch
System reconnaissance
- **Session Management**: Close sessions cleanly to avoid detection alerts
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
Hoch
Network scanning tools
tools: [postgresql, nmap]
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Hoch
Network scanning tools
msf6 > db_import /path/to/nmap-scan.xml
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Hoch
Network scanning tools
proxychains nmap -sT -Pn <internal-target>
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Hoch
Network scanning tools
- **Nmap Integration**: Import reconnaissance data with `db_import`
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Elemente der Fähigkeitsprüfung (50)
Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Kritisch
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Kritisch
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Kritisch
Ruby/shell backtick execution
```
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Kritisch
Ruby/shell backtick execution
- `post/windows/gather/hashdump` - Extract password hashes (requires SYSTEM privileges)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Kritisch
Ruby/shell backtick execution
- `post/multi/recon/local_exploit_suggester` - Identify privilege escalation opportunities
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Kritisch
Ruby/shell backtick execution
- `post/windows/gather/credentials/credential_collector` - Gather stored credentials
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Kritisch
Ruby/shell backtick execution
- `post/windows/manage/persistence_exe` - Establish persistence (if explicitly authorized)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Kritisch
Ruby/shell backtick execution
```
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Kritisch
Ruby/shell backtick execution
1. Background current session: `background`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Kritisch
Ruby/shell backtick execution
2. Select escalation module: `use exploit/windows/local/<escalation-module>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Kritisch
Ruby/shell backtick execution
3. Set session: `set SESSION <session-id>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Kritisch
Ruby/shell backtick execution
4. Run exploit: `exploit`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Kritisch
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Kritisch
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Kritisch
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Kritisch
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Kritisch
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Kritisch
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
Kritisch
Ruby/shell backtick execution
```
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
Kritisch
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
Kritisch
Ruby/shell backtick execution
```bash
The surrounding section provides privilege escalation and UAC bypass workflow steps. This is high-risk post-compromise guidance.
Hoch
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The CI template passes GITHUB_TOKEN to a third-party action. If the action or tag is compromised, the workflow token could be abused.
Hoch
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Hoch
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Hoch
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Hoch
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Hoch
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Hoch
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Hoch
Ruby/shell backtick execution
- **Nmap Integration**: Import reconnaissance data with `db_import`
The line advertises Nmap integration with Metasploit data import. In context it supports target reconnaissance for exploitation.
Hoch
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
Hoch
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
Hoch
PowerShell invocation
- **Empire**: Handoff sessions to PowerShell Empire framework
The line recommends handoff to PowerShell Empire, a post-exploitation framework. That is operational offensive integration guidance.
Hoch
sudo privilege escalation
sudo systemctl start postgresql
The skill instructs using sudo to start PostgreSQL as part of Metasploit setup. It is local privileged command execution, even if operationally plausible.
Hoch
SOCKS proxy
socks4 127.0.0.1 1080
The SOCKS proxy configuration is part of a pivoting workflow through a compromised host. It enables lateral movement and proxying tools into internal networks.
Mittel
Ruby/shell backtick execution
```bash
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
Mittel
Ruby/shell backtick execution
```
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
Mittel
Hardcoded IP address
socks4 127.0.0.1 1080
The hardcoded localhost address configures a SOCKS proxy for pivoting through a compromised host. In this context it supports lateral movement workflow.
Niedrig
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The URL is a remote installer used in a CI command that pipes directly to bash. A changed or compromised remote script would execute in CI.
Risikofaktoren
⚙️ Externe Befehle (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 SKILL.md:36-48 SKILL.md:48-79 SKILL.md:79-83 SKILL.md:83-87 SKILL.md:87-91 SKILL.md:91-97 SKILL.md:97-101 SKILL.md:101-113 SKILL.md:113-127 SKILL.md:127-133 SKILL.md:133-142 SKILL.md:142-154 SKILL.md:154-176 SKILL.md:176-179 SKILL.md:179-180 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-188 SKILL.md:188-199 SKILL.md:199-202 SKILL.md:202-203 SKILL.md:203-204 SKILL.md:204-205 SKILL.md:205-211 SKILL.md:211-223 SKILL.md:223-227 SKILL.md:227-233 SKILL.md:233-276 SKILL.md:276-282 SKILL.md:282-286 SKILL.md:286-293 SKILL.md:293-297 SKILL.md:297-311 SKILL.md:311-315 SKILL.md:315-322 SKILL.md:322-330 SKILL.md:330-344 SKILL.md:344-348 SKILL.md:348-377 SKILL.md:377-390 SKILL.md:390-400 SKILL.md:400-411
🌐 Netzwerkzugriff (25)
assets/ci-config-template.yml:240 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:451 SKILL.md:452 SKILL.md:453 SKILL.md:454 SKILL.md:455 SKILL.md:229 SKILL.md:229
📁 Dateisystemzugriff (2)
🔑 Umgebungsvariablen (23)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ Enthält Skripte (2)
Erkannte Muster
Pipe to shell patternMetasploit framework×48Cobalt Strike keywordsC2 keywordsSystem reconnaissance×4Network scanning tools×4[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
Geprüft von: codex Audit-Verlauf anzeigen →
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-pentest-metasploit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/agentsecops-pentest-metasploit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
AgentSecOps. (2026). pentest-metasploit security audit report (audit version 10) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10BibTeX-Zitat
@techreport{agentsecops-agentsecops-pentest-metasploit-2026,
author = {AgentSecOps},
title = {pentest-metasploit security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10},
note = {Author version 0.1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "pentest-metasploit security audit report (audit version 10)"
version: "0.1.0"
type: report
authors:
- name: "AgentSecOps"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10"
identifiers:
- type: other
value: "skillstore:agentsecops-pentest-metasploit:audit:10"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: Mittel 55
Architektur
100
Wartbarkeit
87
Inhalt
73
Gemeinschaft
100
Spezifikationskonformität
Was Sie erstellen können
Autorisierte Validierung planen
Erstellen Sie einen eingegrenzten Plan zur Schwachstellenvalidierung mit Sicherheitsprüfungen, Evidenzzielen und Bereinigungsaufgaben.
Erkennungsübungen erstellen
Übersetzen Sie dokumentierte Metasploit-Verhaltensweisen in ausschließlich laborbasierte Erkennungs- und Reaktionsszenarien.
Offensive Verfahren prüfen
Bewerten Sie, ob vorgeschlagene Exploit-Workflows den Einsatzregeln und internen Risikogrenzen entsprechen.
Diese Prompts ausprobieren
Autorisierung bestätigen
Prüfe diesen Einsatzumfang und identifiziere Assets innerhalb des Umfangs, Testfenster, Sicherheitsgrenzen und Eskalationskontakte, bevor Validierungsarbeiten beginnen.
Sichere Validierung planen
Erstelle einen kontrollierten Validierungsplan für diesen genehmigten Befund. Berücksichtige Voraussetzungen, Abbruchbedingungen, erwartete Evidenz, Bereinigung und Hinweise zur Berichterstattung.
Befundbericht vorbereiten
Wandle diese autorisierten Testbeobachtungen in eine Befundbeschreibung mit geschäftlichen Auswirkungen, Evidenzzusammenfassung, betroffenen Assets, Behebung und Restrisiko um.
Defensive Übung entwerfen
Wandle diesen Metasploit-artigen Workflow in eine ausschließlich laborbasierte Erkennungsübung mit Telemetriezielen, Kontrollzuordnung, Reaktionsmaßnahmen und Erfolgskriterien um.
Bewährte Praktiken
- Bestätigen Sie schriftliche Autorisierung, Umfang und Notfallkontakte, bevor Sie einen Workflow verwenden.
- Verwenden Sie isolierte Labor- oder Einsatzarbeitsbereiche mit Protokollierungs- und Bereinigungsanforderungen.
- Dokumentieren Sie Aktionen, Evidenz und Abbruchbedingungen für jeden Validierungsschritt.
Vermeiden
- Exploit-Schritte auf Assets außerhalb des genehmigten Umfangs ausführen.
- Phishing-Payloads, Persistenz oder Sammlung von Zugangsdaten für Live-Benutzer erzeugen.
- Remote-Installer-Skripte oder breite CI-Tokens ohne Pinning und Prüfung verwenden.
Häufig gestellte Fragen
Ist dies sicher für die automatische Installation?
Nein. Der Skill enthält operative offensive Sicherheits-Workflows und erfordert vor der Nutzung eine menschliche Sicherheitsprüfung.
Erfordert dieser Skill Metasploit?
Ja. Die dokumentierten Workflows setzen Metasploit Framework und zugehörige Tools in einer kontrollierten Umgebung voraus.
Kann der Skill die Autorisierung verifizieren?
Nein. Benutzer müssen schriftliche Autorisierung, Umfang und Testfenster vom Asset-Eigentümer bereitstellen.
Können Verteidiger diesen Skill verwenden?
Ja, Verteidiger können ihn für ausschließlich laborbasierte Erkennungsplanung, Kontrollvalidierung und Reaktionsübungen anpassen.
Führt der Skill selbst Befehle aus?
Der Skill stellt befehlsorientierte Workflows bereit. Die Ausführung hängt vom Agenten, der Benutzerfreigabe und den Umgebungskontrollen ab.
Was sollte vor der Veröffentlichung entfernt werden?
Entfernen Sie Payload-Auslieferung, Sammlung von Zugangsdaten, Persistenz, C2-Übergabe, Umgehung und Schritte zur Live-Ausnutzung.
Entwicklerdetails
Autor
AgentSecOpsLizenz
MIT
Autorenversion
v0.1.0
Skillstore-Revision
r1
Ref.
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Aktualität der Wartung
22.7.2026
Nutzung
8 Downloads · 375 Aufrufe
Dateistruktur