SkillsAdd

wgpsec/aboutsecurity

harbor-exploit

Harbor容器镜像仓库漏洞利用与检测技能。覆盖Harbor全部已知高危漏洞的利用手法，包括： - CVE-2026-4404: 硬编码默认凭据 (<=2.15.0, CVSS 9.4) - CVE-2022-46463: 未授权API访问/镜像泄露 - CVE-2019-16097: 普通用户创建管理员提权…

First seen Apr 22, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗

Summary

  • Harbor容器镜像仓库漏洞利用与检测技能。覆盖Harbor全部已知高危漏洞的利用手法，包括：
  • - CVE-2026-4404: 硬编码默认凭据 (<=2.15.0, CVSS 9.4)
  • - CVE-2022-46463: 未授权API访问/镜像泄露
  • - CVE-2019-16097: 普通用户创建管理员提权…

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

heap-exploitation Similar name
yaklang/hack-skills

>- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities includin…

3K installs
kernel-exploitation Similar name
yaklang/hack-skills

>- Linux kernel exploitation playbook. Use when exploiting kernel vulnerabilities (UAF, OOB, ra…

2.9K installs
browser-exploitation-v8 Similar name
yaklang/hack-skills

>- Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities …

2.9K installs
format-string-exploitation Similar name
yaklang/hack-skills

>- Format string exploitation playbook. Use when printf-family functions receive user-controlle…

3K installs
patch-diff-exploit Similar name
zhaoxuya520/reverse-skill

N-day 补丁差分到利用。从厂商发布的补丁里反推漏洞点、写 PoC、做成可用的攻击模块。 适用场景：已知…

14 installs
exploiting-sql-injection-vulnerabilities Similar name
mukul975/anthropic-cybersecurity-skills

Identifies and exploits SQL injection vulnerabilities in web applications during authorized pen…

430 installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 1 installs