Individual skill

sonarqube-tactics

SonarQube 代码审计平台攻击。当发现目标运行 SonarQube 实例（默认 9000 端口）、默认凭据 admin/admin 未修改、或需要从 SonarQube 窃取项目源代码和漏洞信息时使用。覆盖默认凭据攻击、项目源代码窃取、漏洞/Issue 枚举（CRITICAL 优先）、用户凭据与 Token 窃取、Quality Gate 绕过、配置文件提取（数据库/SCM 凭据）、Webhook 滥用、插件分析、热点与度量数据导出

skills/postexploit/product/sonarqube-tactics/SKILL.md

Source commit c0d3a4645f26be5b94f64344b501db4191dc9788

What was checked

Matches the observed repository HEAD

Yes

Scanner rules are current

No

Repository scan complete

No

Skill scan complete

No

Observed behavior

Not checked yet

Last checked

Nov 3, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.