hunt-command-injection SKILL.md skillA
hunt-command-injection from galact-byte/galact-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add galact-byte/galact-skills/hunt-command-injection@git:20260806.bbab2e5Pins git:20260806.bbab2e5 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- galact-byte/galact-skills
- Path
skills/hunt-command-injection/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260806.bbab2e5, committed Aug 6, 2026
- Size
- 5,207 bytes
- Repository stars
- 7
- License
- a license file GitHub does not identify
在授权渗透测试中系统性挖掘命令注入与参数/标志注入（OS command injection、argument/flag injection、外部程序 delegate 注入）。当目标把用户输入拼进 shell 命令、或作为参数传给 git/tar/curl/ffmpeg/ImageMagick 等外部程序、或经模板/eval 执行时使用——典型场景：文件名/路径/URL/ref 参数最终进了命令行，想拿 RCE 或任意文件读写。适用目标类型 Web / REST API / CI 系统。触发场景包括用户说"测下命令注入/RCE""这个参数会不会进 shell""git/tar/ffmpeg 参数能注入吗""上传头像触发 ImageMagick 了"。输出：带原始请求/命令回显或带外证据的 finding 报告（含 killed 记录）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# hunt-command-injection · 命令注入猎杀 只解决 **命令注入一类**：直接 OS 命令注入、**参数/标志注入**（把 `--output` 之类塞进已有命令）、以及**外部程序 delegate 注入**（ImageMagick/ffmpeg 解析时执行命令）。核心是追踪"用户输入 → 命令行 argv"的数据流，用**带外/时序/回显**判活，而非盲打分号。 命令注入直达 RCE，破坏性极高。默认只做**无害探测**（sleep 时序、带外 DNS/HTTP、`id`/`whoami` 只读回显），**不投放持久化/破坏性 payload**，除非 scope 明确授权。关键动作走 `tools/` 脚本，证据统一留存。payload 族与真实报告见 `reference.md`。 ## Scope（授权范围） **先确认授权，再探测。** 命令注入探测可能真的在目标上执行命令。 开工前落实： - 授权目标与**允许的探测深度**（仅时序/带外判活 / 允许只读命令 `id` / 允许写文件 PoC）。 - 带外回连地址（OAST）与是否允许触达内网。 - 明确禁止：破坏性命令（rm/关机/改配置）、持久化后门。 任一不清楚就停下问。**绝不**投放破坏性或持久化 payload。 ## Goal 判定用户输入是否能进入命令行并被执行（或改变命令语义），给出可复现 PoC 与影响（RCE / 任意文件读写 / CI 接管），并留存带外命中或回显证据。 ## Workflow `scope-check → recon → hunt → validate → report`。 ### 1. scope-check - **输入**：授权范围 + 允许深度。 - **动作**：写 `evidence/scope.txt`（含 allow_write / oast_domain）。 - **命令**：`bash tools/recon.sh <target> --scope-only`。 - **终止条件**：`evidence/scope.txt` 存在且授权明确，否则 KILL。 ### 2. recon - **输入**：in-scope 目标。 - **动作**：枚举"输入可能进命令行"的入口——文件名/路径/URL/ref/分支名/格式转换/导出/备份/ping/whois 类功能，尤其**上传后触发的图像/视频处理**（ImageMagick/ffmpeg）与 **CI/git 操作**（clone/archive/import）。 - **输出**：`recon/endpoints.json`（入口 + 疑似落点类型：shell / argv / delegate）。 …
Read the whole file at its exact version.
How to install
mdr add galact-byte/galact-skills/hunt-command-injection@sha256:658db2cde344263eThe line at the top of this page pins the label git:20260806.bbab2e5, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_qidvhcx2iy7zrqif)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 6, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5207 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
galact-byte/galact-skills · 7 stars · license a license file GitHub does not identify · pushed 2026-10-12 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_qidvhcx2iy7zrqif GET https://markdownregistry.com/api/v1/resolve?ref=galact-byte/galact-skills/hunt-command-injection GET https://markdownregistry.com/api/v1/blob/658db2cde344263e7d1cd3f2a42dba29cca507f1ff20e12bbdedc47eff824856
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.