技能 network-101
📦
network-101
内容修订 r2 高风险 ⚙️ 外部命令🌐 网络访问
配置网络服务实验室
网络实验室搭建通常需要可重复的服务配置和验证。此技能为受控安全实践提供 HTTP、HTTPS、SNMP 和 SMB 实验室服务指导。
支持: Claude Codex Code(CC)
安装前请停下并请求确认。
请审查安装计划，并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "network-101" from https://skillstore.io/skills/sickn33-network-101.md and its manifest at https://skillstore.io/api/skills/sickn33-network-101/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“network-101”。 我需要在 Ubuntu 上为私有子网搭建一个安全的 HTTP 服务实验室。
预期结果:
一份分阶段的实验室计划，涵盖软件包设置、防火墙范围、服务验证、日志记录和回滚说明。
正在使用“network-101”。 帮我在隔离实验室中测试 SNMP。
预期结果:
一份清单，涵盖 community 设置、目标所有权、枚举范围、预期响应和清理任务。
正在使用“network-101”。 在学生使用之前审查我的 SMB 实验室配置。
预期结果:
一份风险摘要，涵盖匿名访问、共享权限、防火墙暴露、监控和更安全的拆除步骤。
安全审计
高风险v6 • 2026/8/4 打开版本化报告
The skill is an authorized network-lab guide, and many alerts are false positives caused by Markdown fences, documentation labels, and private example addresses. Privileged host changes, service persistence, active network enumeration, and binding to all interfaces are confirmed risks. Weak SNMP, anonymous writable SMB, and credential-form examples require stronger isolation and handling guidance.
1
已扫描文件
360
分析行数
30
复核项
0
已忽略误报
已确认安全问题 (7)
高
Systemd service enablement
sudo systemctl enable apache2
The command enables Apache to start automatically at boot. This is a persistent system change, even though the stated purpose is legitimate lab setup.
高
Network scanning tools
nmap -p 443 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
高
Network scanning tools
enum4linux -a 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
高
Network scanning tools
nmap --script smb-vuln* 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
高
Insecure SNMP Lab Configuration
The guide recommends SNMP v1 with public and private community strings, then demonstrates process enumeration and community-string guessing. Exposure outside an isolated lab could disclose system details.
The commands and configuration explicitly use cleartext SNMP v1 and the well-known public community. The skill also acknowledges this protocol limitation.
高
Anonymous Writable SMB Configuration
The sample share enables guest access and disables read-only mode. A reachable lab host could accept unauthorized file changes if the filesystem permissions also permit them.
The Samba configuration explicitly sets guest access to yes and read-only to no. Actual write access still depends on the shown directory permissions and Samba identity mapping.
中
Credential Collection Page Without Handling Guidance
The HTTP example creates a login form that requests a username and password. It omits guidance on test credentials, storage, transport, and cleanup.
The example visibly requests password input and posts it to login.php. No backend or exfiltration is shown, but unsafe lab handling could expose entered credentials.
能力复核项 (30)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
sudo privilege escalation
sudo apt update && sudo apt install apache2
This command installs or updates system packages with root privileges on line 62. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo systemctl start apache2
This root command changes a system service on line 65, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo systemctl enable apache2
This root command changes a system service on line 66, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
echo "<html><body><h1>Test Page</h1></body></html>" | sudo tee /var/www/html/index.html
This command writes content into a root-owned system or service path on line 69. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo ufw allow 80/tcp
This root command changes the host firewall on line 79 and exposes an inbound service. An incorrect target or environment could expand network access.
高
sudo privilege escalation
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
This root command creates a private key and certificate in system directories on line 93. It writes security-sensitive host configuration and needs operator approval.
高
sudo privilege escalation
sudo a2enmod ssl
This command writes content into a root-owned system or service path on line 98. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo systemctl restart apache2
This root command changes a system service on line 99, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo nano /etc/apache2/sites-available/default-ssl.conf
This command opens a root-owned service configuration file for modification on line 106. Incorrect edits can weaken or disrupt the host service.
高
sudo privilege escalation
sudo a2ensite default-ssl
This command writes content into a root-owned system or service path on line 109. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo systemctl reload apache2
This root command changes a system service on line 110, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo apt install snmpd snmp
This command installs or updates system packages with root privileges on line 134. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo nano /etc/snmp/snmpd.conf
This command opens a root-owned service configuration file for modification on line 137. Incorrect edits can weaken or disrupt the host service.
高
sudo privilege escalation
sudo systemctl restart snmpd
This root command changes a system service on line 144, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo apt install samba
This command installs or updates system packages with root privileges on line 185. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo install -d -m 0770 -o root -g sambashare /srv/samba/share
This root command creates a service directory and assigns permissions on line 188. It changes filesystem ownership and access controls on the host.
高
sudo privilege escalation
sudo nano /etc/samba/smb.conf
This command opens a root-owned service configuration file for modification on line 191. Incorrect edits can weaken or disrupt the host service.
高
sudo privilege escalation
sudo systemctl restart smbd
This root command changes a system service on line 201, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo tail -f /var/log/apache2/access.log
This command reads service logs with root privileges on line 231. Logs can contain sensitive request data and should only be accessed on authorized systems.
高
sudo privilege escalation
sudo tail -f /var/log/apache2/error.log
This command reads service logs with root privileges on line 234. Logs can contain sensitive request data and should only be accessed on authorized systems.
高
sudo privilege escalation
sudo apt install apache2
This command installs or updates system packages with root privileges on line 303. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo systemctl start apache2
This root command changes a system service on line 304, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
cat << 'EOF' | sudo tee /var/www/html/login.html
This command writes content into a root-owned system or service path on line 307. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo ufw allow 80/tcp
This root command changes the host firewall on line 320 and exposes an inbound service. An incorrect target or environment could expand network access.
高
sudo privilege escalation
sudo apt install snmpd
This command installs or updates system packages with root privileges on line 327. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
echo "rocommunity public" | sudo tee -a /etc/snmp/snmpd.conf
This command writes content into a root-owned system or service path on line 328. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo systemctl restart snmpd
This root command changes a system service on line 329, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo apt install samba
This command installs or updates system packages with root privileges on line 339. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo install -d -m 0770 -o root -g sambashare /srv/samba/anonymous
This root command creates a service directory and assigns permissions on line 341. It changes filesystem ownership and access controls on the host.
中
Hardcoded IP address
| Cannot connect remotely | Bind service to 0.0.0.0 instead of localhost |
The troubleshooting advice recommends binding a service to 0.0.0.0. This exposes it on every interface and can unintentionally make a weak lab service reachable.
风险因素
⚙️ 外部命令 (50)
SKILL.md:60-73 SKILL.md:73-77 SKILL.md:77-83 SKILL.md:83-91 SKILL.md:91-100 SKILL.md:100-104 SKILL.md:104-111 SKILL.md:111-115 SKILL.md:115-124 SKILL.md:124-132 SKILL.md:132-145 SKILL.md:145-154 SKILL.md:154-169 SKILL.md:169-183 SKILL.md:183-202 SKILL.md:202-206 SKILL.md:206-221 SKILL.md:221-229 SKILL.md:229-238 SKILL.md:238-242 SKILL.md:242-248 SKILL.md:248-264 SKILL.md:264-276 SKILL.md:276-301 SKILL.md:301-321 SKILL.md:321-325 SKILL.md:325-333 SKILL.md:333-337 SKILL.md:337-345 SKILL.md:345-352 SKILL.md:81 SKILL.md:62 SKILL.md:65 SKILL.md:66 SKILL.md:69 SKILL.md:79 SKILL.md:93 SKILL.md:98 SKILL.md:99 SKILL.md:106 SKILL.md:109 SKILL.md:110 SKILL.md:134 SKILL.md:137 SKILL.md:144 SKILL.md:185 SKILL.md:188 SKILL.md:191 SKILL.md:201 SKILL.md:231
检测到的模式
Systemd service enablementNetwork scanning tools×3
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/sickn33-network-101/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/sickn33-network-101?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/sickn33-network-101?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-network-101/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/sickn33-network-101.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
zebbern. (2026). network-101 security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-network-101/audits/6BibTeX 引用
@techreport{zebbern-sickn33-network-101-2026,
author = {zebbern},
title = {network-101 security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-network-101/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "network-101 security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-08-04"
url: "https://skillstore.io/skills/sickn33-network-101/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-network-101:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
69
社区
83
规范符合性
你能构建什么
构建安全培训实验室
为课堂练习创建可重复的 HTTP、HTTPS、SNMP 和 SMB 服务。
练习服务枚举
使用常见工具验证暴露的实验室服务，并记录预期发现。
验证沙盒网络行为
在运行受控测试之前检查防火墙规则、服务绑定和日志。
试试这些提示
规划 HTTP 实验室
为隔离子网中的一台 Ubuntu 主机创建安全的 HTTP 实验室计划。包含验证和回滚步骤。
添加 HTTPS 测试
用自签名 HTTPS 测试扩展我的 HTTP 实验室。解释证书检查、防火墙范围和预期警告。
准备 SNMP 和 SMB 练习
设计经过授权的 SNMP 和 SMB 实验室练习，包含明确的目标范围、预期结果和清理步骤。
审查网络实验室运行手册
审查此网络服务实验室运行手册，检查不安全暴露、弱默认值、缺失的同意检查和拆除缺口。
最佳实践
- 仅使用你拥有或明确获准测试的系统。
- 在具有文档化目标地址的隔离实验室网络中运行示例。
- 在更改服务或防火墙规则之前创建快照和拆除步骤。
避免
- 在生产或共享主机上运行特权命令。
- 在没有隔离的情况下将服务暴露在广泛接口上。
- 在实验室之外使用默认 SNMP communities 或匿名 SMB。
常见问题
此技能适用于生产网络吗？
不是。它设计用于授权实验室和受控培训环境。
它会自动运行命令吗？
不会。它提供指导，但用户或代理可能会选择运行特权命令。
为什么包含不安全设置？
它们支持安全培训场景，让学生学习识别弱配置。
它能帮助进行 HTTPS 测试吗？
可以。它涵盖自签名证书、服务检查和预期的浏览器警告。
它引用了哪些工具？
它引用 curl、nmap、snmpwalk、smbclient、smbmap 和 enum4linux 等工具。
使用前我应该准备什么？
准备隔离的实验室主机、授权、防火墙访问和清理计划。