zombie

Automates weak credential detection across network services using aiscan.

235|25|Updated May 7, 2026
One-click install
npx skills add https://github.com/chainreactors/aiscan --skill zombie-chainreactors
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: zombie
Source: https://github.com/chainreactors/aiscan/tree/main/skills/zombie
Command: npx skills add https://github.com/chainreactors/aiscan --skill zombie-chainreactors

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the manual overhead and complexity of verifying network service security by automating weak credential checks across various protocols.

Core Features & Use Cases

  • Multi-Protocol Support: Tests authentication for services like SSH, MySQL, Redis, FTP, and RDP.
  • Detailed Reporting: Provides granular results including service URI, authentication status, and specific error messages like lockouts or connection failures.
  • Use Case: Security professionals can use this to audit a range of internal servers for default or weak passwords during an authorized penetration test.

Quick Start

Use the zombie skill to perform a weak credential check on the MySQL service at 192.168.1.1 with a concurrency of 8.

Frequently Asked Questions about zombie

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate weak credential testing across multiple network services?

You can automate weak credential testing by using a skill that checks authentication across protocols like SSH, MySQL, Redis, FTP, and RDP. It requires the aiscan binary to execute protocol-specific authentication attempts and parse service responses with high concurrency.

Does weak credential scanning work with high-concurrency network service checks?

High-concurrency service scanning is supported for weak credential checks to assess authentication security across diverse network services. You can specify concurrency levels, such as setting it to 8 for scanning a MySQL service, to optimize the speed of authorized penetration tests.

What is the best way to audit internal servers for default passwords?

Auditing internal servers for default passwords is best handled by an automated weak credential testing tool designed for authorized penetration tests. It provides detailed reporting that includes the service URI, authentication status, and specific error messages like lockouts or connection failures.

Do I need any specific binaries to perform automated weak credential checks?

Yes, you need the aiscan binary to perform automated weak credential checks. This binary is required to execute protocol-specific authentication attempts and parse the service responses for security assessment.

What details are included in the reporting for network authentication scanning?

Reporting for network authentication scanning includes granular results such as the service URI, authentication status, and specific error messages. This covers details like account lockouts or connection failures encountered during the weak credential check.