YARA rule 'exploit_framework': Exploit framework components and payloads [hacktools]
High
- Category
- YARA Match
- Content
- **Authorization**: directory and configuration inspection assumes the user owns or is authorized for them; sensitive data (keys / credentials) is reported by location and risk level only — contents are never echoed. - **Legal redlines**: this skill is for defense / hardening / education on your own environments only; it produces no executable injection strings, no evasion, no phishing and no social-engineering steps; users are responsible for applicable law (e.g. China Cybersecurity Law, Criminal Law Articles 285/286). ## Installation Pick any of the four methods below; the order is the recommended priority. Skill files always come from **npm** (GitHub can be slow without a proxy; npm supports mirrors). ### Method 1: npm one-liner (recommended) ```text # Optional China mirror: npm config set registry https://registry.npmmirror.com npx -y @yottameta/yotta-agent-hardening --agent <agent-name> # install to the agent's default user-level skills dir npx -y @yottameta/yotta-age
- Confidence
- 80% confidence
- Finding
- YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).