shiro-attack2

v5.1.1

ShiroAttack2 — Shiro-550 漏洞利用技能集：探测、密钥爆破、命令执行、内存马注入、Key 修改。

CodexClaude Code1 skill

2.6kupdated 2 months ago

Source

$ git clone https://github.com/SummerSec/ShiroAttack2

Clone the source, then follow the repository's marketplace instructions for your runtime. The repository root is the plugin root.

Layout

shiro-attack2/

├── .codex-plugin/plugin.json
├── .claude-plugin/plugin.json
└── skills/shiro-attack-cli/SKILL.md

Skills1

shiro-attack-cliskills/shiro-attack-cli/SKILL.md

当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro 漏洞"。覆盖单目标探测、密钥爆破、Gadget 链自动检测、命令执行、内存马注入和 Key 修改。

Manifests2

.codex-plugin/plugin.json

{
  "name": "shiro-attack2",
  "version": "5.1.1",
  "description": "ShiroAttack2 — Shiro-550 漏洞利用技能集：探测、密钥爆破、命令执行、内存马注入、Key 修改。",
  "skills": "./skills",
  "interface": {
    "capabilities": [
      "Read"
    ]
  }
}

.claude-plugin/plugin.json

{
  "name": "shiro-attack2",
  "version": "5.1.1",
  "description": "ShiroAttack2 — Shiro-550 漏洞利用工具：密钥爆破、Gadget 链探测、命令执行、内存马注入、Key 修改。",
  "author": {
    "name": "SummerSec",
    "url": "https://github.com/SummerSec"
  }
}