exploit

Execute exploits against confirmed vulnerabilities using Metasploit and public scripts.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/duriandurino/openclawrino --skill exploit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: exploit
Source: https://github.com/duriandurino/openclawrino/tree/main/exploit
Command: npx skills add https://github.com/duriandurino/openclawrino --skill exploit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires msfconsole, msfvenom, searchsploit, hydra, medusa, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enables users to execute exploits against identified vulnerabilities, aiming to gain unauthorized access or control over target systems.

Core Features & Use Cases

  • Metasploit Integration: Leverages Metasploit Framework for automated exploitation.
  • Public Exploit Execution: Supports running publicly available exploit scripts.
  • Manual Exploitation: Provides guidance for manual techniques like SQL injection and command injection.
  • Payload Generation: Assists in creating reverse shells and other payloads.
  • Use Case: After identifying a vulnerable SSH service on a target, use this Skill to run the appropriate Metasploit module to gain a shell.

Quick Start

Use the exploit skill to run the Metasploit module for CVE-2024-6387 against 192.168.1.105.

Frequently Asked Questions about exploit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I execute a Metasploit module against a specific CVE?

To execute a Metasploit module against a CVE, this Skill automates msfconsole to run the appropriate exploit module against your confirmed vulnerabilities, facilitating gaining shells and compromising hosts during penetration testing.

What's the best way to generate reverse shell payloads for penetration testing?

Generating reverse shell payloads is handled by integrating msfvenom, which assists in creating and delivering custom payloads to compromised hosts after a vulnerability is successfully exploited.

Do I need msfconsole and searchsploit installed to run public exploit scripts?

Yes, you need msfconsole, msfvenom, and searchsploit installed for full functionality, as the Skill leverages these tools to execute publicly available scripts and automate exploitation against target systems.

Can I perform manual command injection techniques alongside automated Metasploit exploitation?

Yes, you can perform manual command injection techniques alongside automated exploitation, as the Skill provides guidance for manual techniques like SQL injection while supporting Metasploit integration for automated vulnerability execution.

Does hydra or medusa support compromising vulnerable SSH services during penetration testing?

Hydra and medusa are integrated dependencies used to facilitate compromising vulnerable SSH services, allowing you to gain unauthorized access and control over target hosts after identifying weaknesses.

When should I use manual exploitation instead of automated Metasploit modules?

Manual exploitation should be used when public exploit scripts are unavailable or custom techniques like SQL injection are required, whereas automated Metasploit modules are best for executing confirmed CVE vulnerabilities directly.