技能 network-101
📦
network-101
內容修訂 r2 高風險 ⚙️ 外部命令🌐 網路存取
設定網路服務實驗室
網路實驗室設定通常需要可重複的服務配置與驗證。此技能會引導 HTTP、HTTPS、SNMP 和 SMB 實驗室服務，用於受控的安全實務練習。
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "network-101" from https://skillstore.io/skills/sickn33-network-101.md and its manifest at https://skillstore.io/api/skills/sickn33-network-101/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「network-101」。 我需要在 Ubuntu 上為私人子網路建立安全的 HTTP 服務實驗室。
預期結果:
一份分階段實驗室計畫，涵蓋套件設定、防火牆範圍、服務驗證、記錄，以及復原注意事項。
正在使用「network-101」。 協助我在隔離實驗室中測試 SNMP。
預期結果:
一份檢查清單，涵蓋 community 設定、目標所有權、列舉範圍、預期回應與清理工作。
正在使用「network-101」。 在學生使用前，審查我的 SMB 實驗室設定。
預期結果:
一份風險摘要，涵蓋匿名存取、共用權限、防火牆暴露、監控，以及更安全的拆除步驟。
安全審計
高風險v6 • 2026/8/4 開啟版本化報告
The skill is an authorized network-lab guide, and many alerts are false positives caused by Markdown fences, documentation labels, and private example addresses. Privileged host changes, service persistence, active network enumeration, and binding to all interfaces are confirmed risks. Weak SNMP, anonymous writable SMB, and credential-form examples require stronger isolation and handling guidance.
1
已掃描檔案
360
分析行數
30
複核項目
0
已忽略的誤報
已確認的安全問題 (7)
高
Systemd service enablement
sudo systemctl enable apache2
The command enables Apache to start automatically at boot. This is a persistent system change, even though the stated purpose is legitimate lab setup.
高
Network scanning tools
nmap -p 443 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
高
Network scanning tools
enum4linux -a 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
高
Network scanning tools
nmap --script smb-vuln* 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
高
Insecure SNMP Lab Configuration
The guide recommends SNMP v1 with public and private community strings, then demonstrates process enumeration and community-string guessing. Exposure outside an isolated lab could disclose system details.
The commands and configuration explicitly use cleartext SNMP v1 and the well-known public community. The skill also acknowledges this protocol limitation.
高
Anonymous Writable SMB Configuration
The sample share enables guest access and disables read-only mode. A reachable lab host could accept unauthorized file changes if the filesystem permissions also permit them.
The Samba configuration explicitly sets guest access to yes and read-only to no. Actual write access still depends on the shown directory permissions and Samba identity mapping.
中
Credential Collection Page Without Handling Guidance
The HTTP example creates a login form that requests a username and password. It omits guidance on test credentials, storage, transport, and cleanup.
The example visibly requests password input and posts it to login.php. No backend or exfiltration is shown, but unsafe lab handling could expose entered credentials.
能力複核項目 (30)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
sudo privilege escalation
sudo apt update && sudo apt install apache2
This command installs or updates system packages with root privileges on line 62. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo systemctl start apache2
This root command changes a system service on line 65, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo systemctl enable apache2
This root command changes a system service on line 66, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
echo "<html><body><h1>Test Page</h1></body></html>" | sudo tee /var/www/html/index.html
This command writes content into a root-owned system or service path on line 69. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo ufw allow 80/tcp
This root command changes the host firewall on line 79 and exposes an inbound service. An incorrect target or environment could expand network access.
高
sudo privilege escalation
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
This root command creates a private key and certificate in system directories on line 93. It writes security-sensitive host configuration and needs operator approval.
高
sudo privilege escalation
sudo a2enmod ssl
This command writes content into a root-owned system or service path on line 98. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo systemctl restart apache2
This root command changes a system service on line 99, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo nano /etc/apache2/sites-available/default-ssl.conf
This command opens a root-owned service configuration file for modification on line 106. Incorrect edits can weaken or disrupt the host service.
高
sudo privilege escalation
sudo a2ensite default-ssl
This command writes content into a root-owned system or service path on line 109. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo systemctl reload apache2
This root command changes a system service on line 110, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo apt install snmpd snmp
This command installs or updates system packages with root privileges on line 134. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo nano /etc/snmp/snmpd.conf
This command opens a root-owned service configuration file for modification on line 137. Incorrect edits can weaken or disrupt the host service.
高
sudo privilege escalation
sudo systemctl restart snmpd
This root command changes a system service on line 144, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo apt install samba
This command installs or updates system packages with root privileges on line 185. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo install -d -m 0770 -o root -g sambashare /srv/samba/share
This root command creates a service directory and assigns permissions on line 188. It changes filesystem ownership and access controls on the host.
高
sudo privilege escalation
sudo nano /etc/samba/smb.conf
This command opens a root-owned service configuration file for modification on line 191. Incorrect edits can weaken or disrupt the host service.
高
sudo privilege escalation
sudo systemctl restart smbd
This root command changes a system service on line 201, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo tail -f /var/log/apache2/access.log
This command reads service logs with root privileges on line 231. Logs can contain sensitive request data and should only be accessed on authorized systems.
高
sudo privilege escalation
sudo tail -f /var/log/apache2/error.log
This command reads service logs with root privileges on line 234. Logs can contain sensitive request data and should only be accessed on authorized systems.
高
sudo privilege escalation
sudo apt install apache2
This command installs or updates system packages with root privileges on line 303. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo systemctl start apache2
This root command changes a system service on line 304, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
cat << 'EOF' | sudo tee /var/www/html/login.html
This command writes content into a root-owned system or service path on line 307. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo ufw allow 80/tcp
This root command changes the host firewall on line 320 and exposes an inbound service. An incorrect target or environment could expand network access.
高
sudo privilege escalation
sudo apt install snmpd
This command installs or updates system packages with root privileges on line 327. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
echo "rocommunity public" | sudo tee -a /etc/snmp/snmpd.conf
This command writes content into a root-owned system or service path on line 328. It makes a privileged host change that requires explicit approval.
高
sudo privilege escalation
sudo systemctl restart snmpd
This root command changes a system service on line 329, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
高
sudo privilege escalation
sudo apt install samba
This command installs or updates system packages with root privileges on line 339. It changes the host and requires explicit operator approval.
高
sudo privilege escalation
sudo install -d -m 0770 -o root -g sambashare /srv/samba/anonymous
This root command creates a service directory and assigns permissions on line 341. It changes filesystem ownership and access controls on the host.
中
Hardcoded IP address
| Cannot connect remotely | Bind service to 0.0.0.0 instead of localhost |
The troubleshooting advice recommends binding a service to 0.0.0.0. This exposes it on every interface and can unintentionally make a weak lab service reachable.
風險因素
⚙️ 外部命令 (50)
SKILL.md:60-73 SKILL.md:73-77 SKILL.md:77-83 SKILL.md:83-91 SKILL.md:91-100 SKILL.md:100-104 SKILL.md:104-111 SKILL.md:111-115 SKILL.md:115-124 SKILL.md:124-132 SKILL.md:132-145 SKILL.md:145-154 SKILL.md:154-169 SKILL.md:169-183 SKILL.md:183-202 SKILL.md:202-206 SKILL.md:206-221 SKILL.md:221-229 SKILL.md:229-238 SKILL.md:238-242 SKILL.md:242-248 SKILL.md:248-264 SKILL.md:264-276 SKILL.md:276-301 SKILL.md:301-321 SKILL.md:321-325 SKILL.md:325-333 SKILL.md:333-337 SKILL.md:337-345 SKILL.md:345-352 SKILL.md:81 SKILL.md:62 SKILL.md:65 SKILL.md:66 SKILL.md:69 SKILL.md:79 SKILL.md:93 SKILL.md:98 SKILL.md:99 SKILL.md:106 SKILL.md:109 SKILL.md:110 SKILL.md:134 SKILL.md:137 SKILL.md:144 SKILL.md:185 SKILL.md:188 SKILL.md:191 SKILL.md:201 SKILL.md:231
偵測到的模式
Systemd service enablementNetwork scanning tools×3
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/sickn33-network-101/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/sickn33-network-101?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/sickn33-network-101?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-network-101/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/sickn33-network-101.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
zebbern. (2026). network-101 security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-network-101/audits/6BibTeX 引用
@techreport{zebbern-sickn33-network-101-2026,
author = {zebbern},
title = {network-101 security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-network-101/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "network-101 security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-08-04"
url: "https://skillstore.io/skills/sickn33-network-101/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-network-101:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
69
社群
83
規範符合度
你可以打造什麼
建立安全訓練實驗室
為課堂練習建立可重複的 HTTP、HTTPS、SNMP 和 SMB 服務。
練習服務列舉
使用常見工具驗證已暴露的實驗室服務，並記錄預期發現。
驗證沙盒網路行為
在執行受控測試前，檢查防火牆規則、服務繫結與日誌。
試試這些提示
規劃 HTTP 實驗室
為隔離子網路中的一台 Ubuntu 主機建立安全的 HTTP 實驗室計畫。包含驗證與復原步驟。
新增 HTTPS 測試
將我的 HTTP 實驗室延伸為自簽 HTTPS 測試。說明憑證檢查、防火牆範圍與預期警告。
準備 SNMP 和 SMB 練習
設計已授權的 SNMP 和 SMB 實驗室練習，包含明確的目標範圍、預期結果與清理步驟。
審查網路實驗室 Runbook
審查這份網路服務實驗室 runbook，找出不安全暴露、弱預設值、缺少同意檢查，以及拆除流程缺口。
最佳實務
- 僅使用你擁有或已明確獲得測試許可的系統。
- 在具有已記錄目標位址的隔離實驗室網路中執行範例。
- 在變更服務或防火牆規則前，先建立快照與拆除步驟。
避免
- 在正式環境或共用主機上執行特權命令。
- 在缺乏隔離的情況下，將服務暴露於廣泛介面。
- 在實驗室外使用預設 SNMP communities 或匿名 SMB。
常見問題
此技能適用於正式環境網路嗎？
不是。它是為已授權的實驗室與受控訓練環境而設計。
它會自動執行命令嗎？
不會。它提供指引，但使用者或代理可能會選擇執行特權命令。
為什麼包含不安全設定？
它們支援安全訓練情境，讓學生學習識別弱設定。
它能協助 HTTPS 測試嗎？
可以。它涵蓋自簽憑證、服務檢查與預期的瀏覽器警告。
它參照哪些工具？
它參照 curl、nmap、snmpwalk、smbclient、smbmap 和 enum4linux 等工具。
使用前我應該準備什麼？
準備隔離的實驗室主機、授權、防火牆存取，以及清理計畫。