스킬 pentest-metasploit
📦
pentest-metasploit
v0.1.0 콘텐츠 리비전 r1 치명적 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근🔑 환경 변수⚡ 스크립트 포함
Auditar Flujos de Trabajo de Metasploit de Forma Segura
Los equipos de seguridad necesitan una revisión estructurada de la validación autorizada de exploits, pero estos flujos de trabajo conllevan un alto riesgo de uso indebido. Esta skill documenta pasos de evaluación con Metasploit con comprobaciones de alcance, registro y orientación de limpieza.
지원: Claude Codex Code(CC)
이 Skill을 자동으로 설치하지 마세요.
공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "pentest-metasploit" from https://skillstore.io/skills/agentsecops-pentest-metasploit.md and its manifest at https://skillstore.io/api/skills/agentsecops-pentest-metasploit/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"pentest-metasploit" 사용 중입니다. Planificar la validación de un hallazgo SMB autorizado.
예상 결과:
Una checklist con alcance definido que cubre autorización, ventana de prueba, lista de objetivos, comprobaciones de seguridad, evidencia esperada, limpieza y contactos de escalación.
"pentest-metasploit" 사용 중입니다. Resumir evidencia posterior a la explotación para un informe.
예상 결과:
- Una declaración de impacto concisa vinculada al objetivo de prueba aprobado.
- Una cronología del acceso y las acciones observadas.
- Notas de limpieza y remediación para el propietario del activo.
"pentest-metasploit" 사용 중입니다. Crear un plan de detección defensiva a partir de un escenario de payload.
예상 결과:
Un plan de detección con logs esperados, señales de red, alertas de endpoint, pasos de validación y orientación de respuesta para analistas.
보안 감사
치명적v10 • 2026. 7. 9. 버전별 보고서 열기
The skill is not a passive reference; SKILL.md provides operational Metasploit workflows for exploit execution, Meterpreter sessions, credential collection, persistence, lateral movement, phishing payload delivery, evasion, and privilege escalation. Most rule-template and reference-example detections are documentation false positives, but the core skill content and CI pipe-to-shell template are confirmed high-risk or critical. No prompt-injection attempt was found in the reviewed files.
6
스캔된 파일
1,985
분석된 줄 수
50
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (63)
치명적
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads an install script from GitHub and pipes it directly to bash. This is a supply-chain execution path in CI.
치명적
Metasploit framework
name: pentest-metasploit
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
tags: [pentest, metasploit, exploitation, post-exploitation, vulnerability-validation, red-team]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
packages: [metasploit-framework]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
- https://docs.metasploit.com/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
치명적
Metasploit framework
- https://www.offsec.com/metasploit-unleashed/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
치명적
Metasploit framework
# Metasploit Framework Penetration Testing
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
확인된 63건 모두 보기
치명적
Metasploit framework
Metasploit Framework is the industry-standard platform for penetration testing, vulnerability valida
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
Initialize Metasploit console and verify database connectivity:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
# Initialize Metasploit database
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
# Launch Metasploit console
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
msf6 exploit(windows/smb/ms17_010_eternalblue) > set PAYLOAD windows/x64/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > sysinfo
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > getprivs
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > ipconfig
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > route
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run post/windows/gather/enum_av_excluded
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run post/windows/gather/enum_logged_on_users
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > migrate <stable-process-pid>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > getsystem
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run post/windows/gather/arp_scanner RHOSTS=<internal-subnet>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run auxiliary/scanner/smb/smb_version
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run autoroute -s <internal-subnet>/24
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
msf6 exploit(...) > set PAYLOAD linux/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
msf6 exploit(office_word_macro) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
msf6 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
# Headless Metasploit resource script
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
set PAYLOAD windows/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
Map Metasploit activities to ATT&CK framework:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
msf6 evasion(...) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
set PAYLOAD windows/meterpreter/reverse_https # staged
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
set PAYLOAD windows/meterpreter_reverse_https # stageless
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run post/windows/manage/migrate
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > getsystem -t 1 # Named Pipe Impersonation
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > getsystem -t 2 # Named Pipe Impersonation (Admin Drop)
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > getsystem -t 3 # Token Duplication
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
meterpreter > background
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
Organizations can detect Metasploit activity by:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
- **Network IDS**: Signature-based detection of default Metasploit payloads
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
- **Endpoint Detection**: Behavioral analysis of meterpreter process injection
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
치명적
Metasploit framework
- [Metasploit Documentation](https://docs.metasploit.com/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
치명적
Metasploit framework
- [Metasploit Unleashed](https://www.offsec.com/metasploit-unleashed/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
치명적
Cobalt Strike keywords
- **Cobalt Strike**: Export sessions to Cobalt Strike beacons
The line describes exporting sessions to Cobalt Strike beacons. That is C2 and post-exploitation tradecraft integration guidance.
치명적
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The heuristic combination is present in the core skill: command execution, network pivoting, payload handling, and credential access are all documented. It is not a classic stealer, but the dangerous combination is real.
치명적
Operational Exploitation and Post-Exploitation Workflow
SKILL.md guides exploit configuration, reverse Meterpreter payload use, exploit execution, session interaction, credential collection, persistence, and privilege escalation. This goes beyond defensive explanation and can directly enable unauthorized compromise if misused.
The cited sections include concrete exploit, payload, Meterpreter, credential, persistence, and privilege escalation workflow text. The surrounding skill description confirms these are intended assessment procedures, not incidental references.
치명적
Phishing Payload Delivery Workflow
SKILL.md includes a pattern for generating a malicious Office macro document and setting up a handler for a reverse Meterpreter payload. This is social engineering payload delivery guidance, which static pattern matching only partially captured.
The section title and steps explicitly describe malicious document generation and listener setup. There is little ambiguity about the offensive delivery intent.
치명적
Evasion, C2 Handoff, and Covert Operations Guidance
SKILL.md discusses attribution prevention, encrypted callbacks, Cobalt Strike and PowerShell Empire handoff, evasion payload generation, and UAC bypass troubleshooting. These instructions can help avoid detection and extend compromise.
The cited text combines operational security, C2 framework integration, evasion, and privilege escalation instructions. These are high-confidence offensive tradecraft indicators in context.
높음
C2 keywords
- **Exfiltration**: T1041 (Exfiltration Over C2 Channel)
The C2 exfiltration mapping appears in a section that maps Metasploit activities to ATT&CK techniques. In context it supports offensive post-exploitation understanding.
높음
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
높음
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
높음
System reconnaissance
- **Attribution Prevention**: Avoid personal infrastructure or identifiable indicators
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
높음
System reconnaissance
- **Session Management**: Close sessions cleanly to avoid detection alerts
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
높음
Network scanning tools
tools: [postgresql, nmap]
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
높음
Network scanning tools
msf6 > db_import /path/to/nmap-scan.xml
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
높음
Network scanning tools
proxychains nmap -sT -Pn <internal-target>
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
높음
Network scanning tools
- **Nmap Integration**: Import reconnaissance data with `db_import`
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
기능 검토 항목 (50)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
치명적
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
치명적
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
치명적
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
치명적
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
치명적
Ruby/shell backtick execution
```bash
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
치명적
Ruby/shell backtick execution
```
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
치명적
Ruby/shell backtick execution
- `post/windows/gather/hashdump` - Extract password hashes (requires SYSTEM privileges)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
치명적
Ruby/shell backtick execution
- `post/multi/recon/local_exploit_suggester` - Identify privilege escalation opportunities
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
치명적
Ruby/shell backtick execution
- `post/windows/gather/credentials/credential_collector` - Gather stored credentials
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
치명적
Ruby/shell backtick execution
- `post/windows/manage/persistence_exe` - Establish persistence (if explicitly authorized)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
치명적
Ruby/shell backtick execution
```bash
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
치명적
Ruby/shell backtick execution
```
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
치명적
Ruby/shell backtick execution
1. Background current session: `background`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
치명적
Ruby/shell backtick execution
2. Select escalation module: `use exploit/windows/local/<escalation-module>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
치명적
Ruby/shell backtick execution
3. Set session: `set SESSION <session-id>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
치명적
Ruby/shell backtick execution
4. Run exploit: `exploit`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
치명적
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
치명적
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
치명적
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
치명적
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
치명적
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
치명적
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
치명적
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
치명적
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
치명적
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
치명적
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
치명적
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
치명적
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
치명적
Ruby/shell backtick execution
```bash
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
치명적
Ruby/shell backtick execution
```
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
치명적
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
치명적
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
치명적
Ruby/shell backtick execution
```bash
The surrounding section provides privilege escalation and UAC bypass workflow steps. This is high-risk post-compromise guidance.
높음
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The CI template passes GITHUB_TOKEN to a third-party action. If the action or tag is compromised, the workflow token could be abused.
높음
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
높음
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
높음
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
높음
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
높음
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
높음
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
높음
Ruby/shell backtick execution
- **Nmap Integration**: Import reconnaissance data with `db_import`
The line advertises Nmap integration with Metasploit data import. In context it supports target reconnaissance for exploitation.
높음
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
높음
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
높음
PowerShell invocation
- **Empire**: Handoff sessions to PowerShell Empire framework
The line recommends handoff to PowerShell Empire, a post-exploitation framework. That is operational offensive integration guidance.
높음
sudo privilege escalation
sudo systemctl start postgresql
The skill instructs using sudo to start PostgreSQL as part of Metasploit setup. It is local privileged command execution, even if operationally plausible.
높음
SOCKS proxy
socks4 127.0.0.1 1080
The SOCKS proxy configuration is part of a pivoting workflow through a compromised host. It enables lateral movement and proxying tools into internal networks.
중간
Ruby/shell backtick execution
```bash
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
중간
Ruby/shell backtick execution
```
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
중간
Hardcoded IP address
socks4 127.0.0.1 1080
The hardcoded localhost address configures a SOCKS proxy for pivoting through a compromised host. In this context it supports lateral movement workflow.
낮음
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The URL is a remote installer used in a CI command that pipes directly to bash. A changed or compromised remote script would execute in CI.
위험 요인
⚙️ 외부 명령어 (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 SKILL.md:36-48 SKILL.md:48-79 SKILL.md:79-83 SKILL.md:83-87 SKILL.md:87-91 SKILL.md:91-97 SKILL.md:97-101 SKILL.md:101-113 SKILL.md:113-127 SKILL.md:127-133 SKILL.md:133-142 SKILL.md:142-154 SKILL.md:154-176 SKILL.md:176-179 SKILL.md:179-180 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-188 SKILL.md:188-199 SKILL.md:199-202 SKILL.md:202-203 SKILL.md:203-204 SKILL.md:204-205 SKILL.md:205-211 SKILL.md:211-223 SKILL.md:223-227 SKILL.md:227-233 SKILL.md:233-276 SKILL.md:276-282 SKILL.md:282-286 SKILL.md:286-293 SKILL.md:293-297 SKILL.md:297-311 SKILL.md:311-315 SKILL.md:315-322 SKILL.md:322-330 SKILL.md:330-344 SKILL.md:344-348 SKILL.md:348-377 SKILL.md:377-390 SKILL.md:390-400 SKILL.md:400-411
🌐 네트워크 접근 (25)
assets/ci-config-template.yml:240 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:451 SKILL.md:452 SKILL.md:453 SKILL.md:454 SKILL.md:455 SKILL.md:229 SKILL.md:229
📁 파일 시스템 접근 (2)
🔑 환경 변수 (23)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ 스크립트 포함 (2)
감지된 패턴
Pipe to shell patternMetasploit framework×48Cobalt Strike keywordsC2 keywordsSystem reconnaissance×4Network scanning tools×4[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
감사자: codex 감사 이력 보기 →
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-pentest-metasploit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/agentsecops-pentest-metasploit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
AgentSecOps. (2026). pentest-metasploit security audit report (audit version 10) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10BibTeX 인용
@techreport{agentsecops-agentsecops-pentest-metasploit-2026,
author = {AgentSecOps},
title = {pentest-metasploit security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10},
note = {Author version 0.1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "pentest-metasploit security audit report (audit version 10)"
version: "0.1.0"
type: report
authors:
- name: "AgentSecOps"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10"
identifiers:
- type: other
value: "skillstore:agentsecops-pentest-metasploit:audit:10"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 55
아키텍처
100
유지보수성
87
콘텐츠
73
커뮤니티
100
사양 준수
만들 수 있는 것
Planificar Validación Autorizada
Preparar un plan de validación de vulnerabilidades con alcance definido, comprobaciones de seguridad, objetivos de evidencia y tareas de limpieza.
Crear Ejercicios de Detección
Traducir comportamientos documentados de Metasploit en escenarios de detección y respuesta solo para laboratorio.
Revisar Procedimientos Ofensivos
Evaluar si los flujos de trabajo de exploits propuestos coinciden con las reglas del encargo y los límites internos de riesgo.
이 프롬프트를 사용해 보세요
Confirmar Autorización
Revisa el alcance de este encargo e identifica los activos dentro del alcance, ventanas de prueba, límites de seguridad y contactos de escalación antes de cualquier trabajo de validación.
Planificar Validación Segura
Crea un plan de validación controlado para este hallazgo aprobado. Incluye prerrequisitos, condiciones de detención, evidencia esperada, limpieza y notas de reporte.
Preparar Informe de Hallazgo
Convierte estas observaciones de pruebas autorizadas en una narrativa de hallazgo con impacto empresarial, resumen de evidencia, activos afectados, remediación y riesgo residual.
Diseñar Ejercicio Defensivo
Convierte este flujo de trabajo estilo Metasploit en un ejercicio de detección solo para laboratorio con objetivos de telemetría, mapeo de controles, acciones de respuesta y criterios de éxito.
모범 사례
- Confirma la autorización por escrito, el alcance y los contactos de emergencia antes de usar cualquier flujo de trabajo.
- Usa laboratorios aislados o workspaces de encargo con requisitos de registro y limpieza.
- Registra acciones, evidencia y condiciones de detención para cada paso de validación.
피하기
- Ejecutar pasos de explotación en activos fuera del alcance aprobado.
- Generar payloads de phishing, persistencia o recopilación de credenciales para usuarios reales.
- Usar scripts de instalación remotos o tokens de CI amplios sin fijación de versiones ni revisión.
자주 묻는 질문
¿Es segura para instalación automática?
No. La skill contiene flujos de trabajo operativos de seguridad ofensiva y necesita revisión humana de seguridad antes de su uso.
¿Esta skill requiere Metasploit?
Sí. Los flujos de trabajo documentados asumen Metasploit Framework y herramientas relacionadas en un entorno controlado.
¿Puede la skill verificar la autorización?
No. Los usuarios deben proporcionar autorización por escrito, alcance y ventanas de prueba del propietario del activo.
¿Pueden los defensores usar esta skill?
Sí, los defensores pueden adaptarla para planificación de detección solo en laboratorio, validación de controles y ejercicios de respuesta.
¿La skill ejecuta comandos por sí misma?
La skill proporciona flujos de trabajo orientados a comandos. La ejecución depende del agente, la aprobación del usuario y los controles del entorno.
¿Qué debe eliminarse antes de la publicación?
Elimina los pasos de entrega de payloads, recopilación de credenciales, persistencia, traspaso a C2, evasión y explotación en vivo.
개발자 세부 정보
작성자
AgentSecOps라이선스
MIT
작성자 버전
v0.1.0
Skillstore 리비전
r1
참조
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
유지보수 최신성
2026. 7. 18.
사용량
8 다운로드 · 375 조회
파일 구조