MCP App StoreMCP App Store
from abelrguezr
Exploit SNMP services with write-accessible community strings to achieve RCE.
This skill provides a comprehensive workflow for exploiting Simple Network Management Protocol (SNMP) services that are misconfigured with write-accessible community strings. It allows an agent to move from service identification to full remote code execution (RCE).
snmpwalk to identify available MIB objects and extended commands.NET-SNMP-EXTEND-MIB to inject arbitrary system commands.snmp-shell.Requires snmp, snmp-mibs-downloader, and rlwrap installed on the host machine.
This skill has not been reviewed by our automated audit pipeline yet.
Command Injection Methodology
Comprehensive methodology for detecting, exploiting, and bypassing OS command injection, including blind extraction and output-filtering workarounds.
NVD CVE Vulnerability Search
Search the NVD for CVEs by ID or keyword, retrieve CVSS scores, CWE info, affected configurations and remediation references to support audits, incident respons
Catalyst Center Client Operations
Network operations skill for querying Catalyst Center: list and count wired/wireless clients, lookup client details by MAC/IP, analyze band distribution and tim
Kali Docker Pentesting
Provides a Kali Linux Docker container with 200+ penetration-testing tools and guidance for running scans, exploitation, and forensics via direct docker exec co
Acunetix (Membrane) Integration
Integrate and automate Acunetix vulnerability scans, targets, reports and scheduled scans via the Membrane CLI.
Red Team Tools & Methodology
Automate professional red teaming and bug bounty workflows, from subdomain enumeration to vulnerability discovery.
MITRE ATT&CK T1557.001: Name Resolution Poisoning & SMB Relay
Defensive analysis skill for MITRE ATT&CK T1557.001: helps triage, detection engineering, hunting, and incident response for name-resolution poisoning and SMB r
ISC-Bench
Benchmark and pipeline for evaluating model safety (Internal Safety Collapse) using the TVD framework; builds prompts, runs models, extracts harmful content, an