Home / Skills / shiro-attack-cli
shiro-attack-cli
当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro 漏洞"。覆盖单目标探测、密钥爆破、Gadget 链自动检测、命令执行、内存马注入和 Key 修改。
Why this score
This repo hosts 2 skills, so its 2,638 stars are split between them (about 1,319 each) for scoring.
Popularity score: 71/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 21, 2026 at commit 30a74f2615b8, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneshiro-attack-cli SummerSec/ShiroAttack2 · Skill | 71 | ★ 2.6k | ≈61 always | 5mo ago |
| attack-cache-poison CyberStrikeus/CyberStrike · Skill Both about attack | 71 | ★ 3.2k | ≈29 always | 21d ago |
| attack-planner 0xSteph/pentest-ai-agents · Subagent Both about attack | 64 | ★ 2.4k | ≈21 in chat | 29d ago |
| re-ai-attack dslsdzc/rev-skills · Skill Both about attack | 62 | ★ 178 | ≈16 always | 24d ago |
| create-attack-technique DataDog/stratus-red-team · Skill Both about attack | 79 | ★ 2.4k | ≈27 always | 20d ago |
| attack-path-analysis openai/codex-security · Skill Both about attack | 80 | ★ 11k | ≈73 always | 16d ago |