“remote execution”的搜索结果

Analyze Zeek network logs to find lateral movement, when an intruder spreads between internal computers. Examine administrative file sharing, authentication across multiple hosts, and remote service operations to identify suspicious connections and reconstruct incident timelines.

中文简介正在准备中。当前显示英语简介。

• Tracing spread to other computers after an initial compromise
• Investigating unauthorized transfers to administrative shares
• Finding one account authenticating to many internal hosts

Delegate development tasks to external coding agents such as Codex and Claude Code through command-line tools. Choose local or container execution, check setup, provide a self-contained task brief, and inspect important changes afterward.

中文简介正在准备中。当前显示英语简介。

• Delegating project work to a local coding agent
• Running a coding agent inside an Agent Zero container
• Checking CLI setup before assigning a task

Inspect and control the connected local computer through A0 CLI or a Launcher host gateway. The skill guides screenshots, native app input, window targeting, and checking results, with background actions where the connected system supports them.

中文简介正在准备中。当前显示英语简介。

• Inspect the screen of a connected local computer
• Click controls and enter text in native apps
• Target a particular app window for desktop actions

Design infrastructure for agents that run in isolated remote environments. Plan faster session startup, saved work states, shared sessions, authentication, and delivery of code changes and other results back to users.

中文简介正在准备中。当前显示英语简介。

• Designing infrastructure for background coding agents
• Reducing delays when agent sessions start
• Saving and restoring session work

Sysinternals DebugView CLI (DbgViewCli) for capturing and analyzing usermode and kernel-mode Windows debug output from the command line. USE FOR: capturing OutputDebugString output, kernel DbgPrint/KdPrint capture, boot-time debug logging, remote debug monitoring, filtering debug output by PID or process name, crash dump analysis, automated debug capture with bounded execution. DO NOT USE FOR: non-Windows platforms, application-level logging frameworks (log4j, serilog), Azure Monitor or cloud telemetry, ETW tracing (use WPR/xperf instead), user-mode crash dumps (use WinDbg). Triggers: "debug output", "DbgView", "DebugView", "kernel debug", "capture debug logs", "boot logging", "OutputDebugString", "DbgPrint", "KdPrint", "remote debug monitor", "debug capture CLI".

中文简介正在准备中。当前显示原文说明。

Detect and use Crabbox for repository tests and validation on remote runners. Use when crabbox.yaml or .crabbox.yaml exists, the crabbox CLI is available, or work needs remote compute, a clean or reusable environment, target-platform coverage, or auditable execution evidence.

中文简介正在准备中。当前显示原文说明。

Detect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase approach: recon (find dangerous execution sinks), batched verify (trace user input to sinks in parallel subagents, 3 sinks each), and merge (consolidate batch results). Covers OS command injection, eval-like sinks, and unsafe deserialization. Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/rce-results.md. Use when asked to find RCE, command injection, or unsafe deserialization bugs.

中文简介正在准备中。当前显示原文说明。

Shell and session operations after an attack module already established command execution, a raw shell, webshell channel, container/runner shell, or remote session. This module does not own exploitation and should not pull SSH/WinRM/RDP authentication or vulnerability-to-shell chains out of Web/AD/Cloud/K8s/CI-CD/Service/Phishing. Use it to bootstrap a usable callback from existing command execution, stabilize Linux PTY, upgrade Windows sessions with ConPTY where applicable, manage listeners, recover fragile sessions, and exchange files for continued operations.

中文简介正在准备中。当前显示原文说明。

Exploit CVE-2023-36884, a critical Remote Code Execution vulnerability in Windows and Office associated with the Storm-0978 APT. This skill covers the weaponization of malicious Word documents to achieve code execution upon opening, bypassing Mark-of-the-Web (MotW) defenses.

中文简介正在准备中。当前显示原文说明。

Use when applying Cloudflare D1 migrations, fighting Supabase migration history vs SQL execution, choosing direct psql over CLI, designing idempotent migrations, debugging schema drift between local and remote, or recovering after a half-applied migration. Triggers: supabase migration repair instructions appearing, table missing after "applied" status, "Tenant or user not found" when running psql, --remote vs --local D1 confusion, NOT NULL on a populated column, foreign key constraint failures, drift between staging and prod schemas. NOT for Mongo/document migrations, ORM-managed migrations specifically (Prisma/Drizzle have their own conventions), or pure data backfills.

中文简介正在准备中。当前显示原文说明。

Generalize published Spectre and remote microarchitectural research into passive target prerequisites, defensive review, and approval-gated local validation. Use for shared runtimes, JavaScript isolates, edge workers, serverless platforms, browser sandboxes, remote timing, cache side channels, speculative type confusion, or Dynamic Process Isolation analysis.

中文简介正在准备中。当前显示原文说明。

Fornece orientação para interpretar e manipular internals de redes neurais usando nnsight com execução remota NDIF opcional. Use quando precisar executar experimentos de interpretabilidade em modelos massivos (70B+) sem recursos locais de GPU, ou ao trabalhar com qualquer arquitetura PyTorch.

中文简介正在准备中。当前显示原文说明。

Use when applying Cloudflare D1 migrations, fighting Supabase migration history vs SQL execution, choosing direct psql over CLI, designing idempotent migrations, debugging schema drift between local and remote, or recovering after a half-applied migration. Triggers: supabase migration repair instructions appearing, table missing after "applied" status, "Tenant or user not found" when running psql, --remote vs --local D1 confusion, NOT NULL on a populated column, foreign key constraint failures, drift between staging and prod schemas. NOT for Mongo/document migrations, ORM-managed migrations specifically (Prisma/Drizzle have their own conventions), or pure data backfills.

中文简介正在准备中。当前显示原文说明。

Comprehensive CI/CD pipeline exploitation methodology covering GitHub Actions injection vectors (expression injection via PR titles and issue bodies, workflow_run event abuse, GITHUB_TOKEN over-scoping, composite action supply chain compromise), Jenkins attack paths (Groovy sandbox escapes, script console remote code execution, Java remoting deserialization, credential store dumping, shared library injection), GitLab CI exploitation (YAML anchor injection, runner registration token abuse, CI variable extraction, protected branch bypass via merge request pipelines), and Azure DevOps pipeline agent compromise with service connection theft. Includes artifact poisoning techniques across all platforms, tooling guidance for gato and jenkins-attack-framework, and maps to MITRE ATT&CK T1195.002 (Supply Chain Compromise: Compromise Software Supply Chain). Covers enumeration of pipeline configurations, privilege escalation from contributor to code execution, lateral movement through pipeline trust boundaries, and p...

中文简介正在准备中。当前显示原文说明。

Comprehensive lateral movement tradecraft for authorized red team engagements covering credential-based movement (pass-the-hash, pass-the-ticket, overpass-the-hash), NTLM relay attacks (ntlmrelayx with PetitPotam, DFSCoerce, PrinterBug coercion), remote execution protocols (WMI, WinRM, DCOM, PsExec and alternatives), RDP session hijacking, and network pivoting through tunneling tools (chisel, ligolo-ng, SSH tunnels, SOCKS proxies). Provides operator-ready command sequences for mimikatz, crackmapexec/netexec, impacket suite, and evil-winrm with emphasis on OPSEC considerations, SMB signing bypass, and detection evasion. Maps to MITRE ATT&CK T1021 (Remote Services), T1550 (Use Alternate Authentication Material), and sub-techniques. Includes defender-perspective detection guidance for blue team awareness and a rapid engagement cheatsheet for common lateral movement scenarios encountered during internal penetration tests and assumed-breach exercises.

中文简介正在准备中。当前显示原文说明。

Schedule Claude Code cloud agents for recurring tasks or a single future run. Define their instructions, repositories, and service connections, then manage routines, run them immediately, and inspect execution logs when problems occur.

中文简介正在准备中。当前显示英语简介。

• Schedule recurring cloud agent tasks
• Arrange a single run at a specified time
• Review and update existing routines

Prepare and run Google Cloud CLI commands with syntax checks, explicit project and location settings, and focused output. Guides agents through change previews and authorization requirements for destructive operations and sensitive infrastructure changes.

中文简介正在准备中。当前显示英语简介。

• Check command syntax and flags before execution
• List cloud resources with only the fields needed
• Review infrastructure changes before running commands

Design loops that improve an agent’s own prompts, workflows, or execution code from failure records. Define bounded edits, preserve candidate histories, and accept changes through independent tests that check improvements and regressions.

中文简介正在准备中。当前显示英语简介。

• Designing agent self-improvement from failure records
• Defining acceptance checks for self-modifying workflows
• Diagnosing score gaming and stalled improvement

Check running experiments, collect logs and result metrics, and summarize progress alongside baseline comparisons. It supports SSH servers, Vast.ai, and Modal, with optional Weights & Biases metrics and cost reporting for the supported compute services.

中文简介正在准备中。当前显示英语简介。

• Check whether remote experiments have finished
• Compare collected metrics with the matching baseline
• Investigate NaN values or diverging training runs

Review Windows privilege escalation paths from a standard user session to Administrator or SYSTEM. Examine service permissions, token privileges, library loading, scheduled tasks, and stored credentials, with detection indicators for defensive validation.

中文简介正在准备中。当前显示英语简介。

• Investigating privilege escalation in authorized Windows assessments
• Reviewing service and scheduled task permissions
• Checking detection coverage with attack and defense teams

Clarify responsibilities in a TeamHarness team, including planning, task execution, result acceptance, and runtime administration. Use the role boundaries to identify who owns each action and how participants should handle sensitive information.

中文简介正在准备中。当前显示英语简介。

• Assigning responsibilities across team roles
• Checking ownership of task review and acceptance
• Defining work boundaries for remote members

Plan task handoffs between agents on different machines using Git to share YAML task and result files. This implementation specification describes validation, execution limits, result reporting, and GitHub Issues as an additional route for urgent requests.

中文简介正在准备中。当前显示英语简介。

• Designing GPU task handoffs from a laptop to a DevBox
• Standardizing task and result files across machines
• Designing urgent requests through labeled GitHub Issues

Investigate file inclusion and path traversal flaws that let applications access unintended files. The skill guides checks for sensitive data exposure and possible code execution, using content evidence or repeatable indirect signals to avoid false positives.

中文简介正在准备中。当前显示英语简介。

• Review download and template file paths
• Check whether file reads expose secrets
• Validate file access when content is not displayed

Solves CTF challenges by performing first-pass triage, identifying the dominant category, and routing execution to the right specialized ctf-* skill. Use when the user gives you a challenge bundle, a remote service, a suspicious file, or only a vague challenge description and you must determine where to start. Do not use it when the category is already clear and a specialized skill can be invoked directly; this is the dispatcher and recon entrypoint, not the deepest reference for category-specific techniques.

中文简介正在准备中。当前显示原文说明。