メニュー
JNDI injection server to deliver deserialization payloads via LDAP/RMI. Acts as the callback server for fastjson, log4shell, and WebLogic JNDI exploits.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | jndi_exploit |
| description | JNDI injection server to deliver deserialization payloads via LDAP/RMI. Acts as the callback server for fastjson, log4shell, and WebLogic JNDI exploits. |
| metadata | {"openclaw":{"emoji":"🌐","requires":{"bins":["java"],"env":[]},"primaryEnv":null}} |
Spins up a malicious JNDI server (LDAP + RMI) to serve deserialization payloads when a vulnerable application performs a JNDI lookup.
Used as a helper alongside any JNDI-injectable vulnerability: Fastjson, Log4Shell (CVE-2021-44228), WebLogic IIOP, Spring JMX, etc.
Provide params.cmd (command to execute on the victim) and optionally params.listen_port. The skill starts the JNDI server, returns the LDAP/RMI URL for use in the trigger payload.
| Param | Type | Required | Description |
|---|---|---|---|
| cmd | string | yes | OS command to execute on the victim host |
| listen_host | string | no | Attacker-reachable IP/hostname (auto-detect) |
| listen_port | int | no | LDAP listen port (default: 1389) |
| rmi_port | int | no | RMI listen port (default: 1099) |
| timeout | int | no | Server lifetime in seconds (default: 60) |
Both LDAP and RMI modes are supported; LDAP is preferred for modern JDKs with trustURLCodebase restrictions bypassed via deserialization gadgets.
Fast HTTP probing and lightweight fingerprinting using ProjectDiscovery httpx. Use for web recon with redirect-awareness and JSON output.
V5 样板 Micro-Skill：Pydantic 入参、micro_executor SDK、落盘 parsed.json、stderr S-06、stdout Agent 摘要 JSON（嵌入 raw_stdout）。
Build a basic understanding of the current project by scanning source code and available docs. Use when user asks for /init, project onboarding, quick repo familiarization, or initial architecture context.
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
Raw HTTP probing with curl. Use for custom method, headers and body requests in recon and validation.
Advanced web path scanner using multithreaded brute-force. Use for discovering hidden files, directories, and endpoints on web servers.
