post-exploit-technique

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill prompt explicitly provides instructions and commands for offensive post-exploitation activities, including local privilege escalation, credential harvesting, persistence mechanisms (such as creating systemd services and modifying cron jobs), and lateral movement.