skills.rest
SummerSecSummerSecCommunity·1 Agent Skills Included

ShiroAttack2

Test Apache Shiro rememberMe vulnerabilities from GUI or command line

Detects and exploits the Apache Shiro rememberMe deserialization flaw (Shiro-550) for authorized security testing. Automates key brute-forcing, gadget chain detection, command execution, and memory shell injection without manual payload crafting. Offers both a JavaFX GUI and a scriptable CLI with JSON output so agents and testers can run full attack workflows faster.
2,609|289
↗
npx skills add SummerSec/ShiroAttack2 --all -g -y
Available:

Tells the AI agent how to build the fat JAR, run the CLI commands (detect, crack, exec, memshell, changekey), and understand the attack architecture when operating this tool.

All Skills in This Repository (1)

Pure Emerald Level Indicators
📦 In Repo
SummerSecSummerSec

shiro-attack-cli

Detect and verify Shiro-550 rememberMe vulnerabilities via CLI operations.

Community
Advanced

Frequently Asked Questions

FAQPage Schema
How to install ShiroAttack2?▼

Run `npx skills add SummerSec/ShiroAttack2 --all -g -y` in your terminal to install the skill suite globally.

What does ShiroAttack2 do?▼

It tests Apache Shiro servers for the rememberMe deserialization vulnerability (Shiro-550) by brute-forcing AES keys, executing commands, and injecting memory shells during authorized penetration tests.

Can AI agents run ShiroAttack2 automatically?▼

Yes. The CLI supports --json structured output and ships a SKILL.md so agents in Claude Code, Cursor, and Codex can run detect, crack, exec, and memshell commands directly.

Does ShiroAttack2 need a graphical interface?▼

No. It offers both a JavaFX GUI and a full command-line mode that shares the same attack engine, so it works headless on servers.

Is ShiroAttack2 legal to use?▼

Only for authorized security testing and research with written permission from the target owner. Unauthorized use against systems you do not own is illegal.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills