pwncat

The skill is an offensive post-exploitation guide. Its persistence and escalation capabilities are consequential and require strict authorization, but the supplied instructions show no evidence of hidden execution, credential theft, or unrelated data exfiltration.

No executable malicious code is present in the fragment because it is documentation containing actionable reverse/bind shell and implant/persistence guidance. However, it includes a concrete /dev/tcp reverse-shell payload, network listener/callback orchestration, SSL options, and OPSEC evasion and reconnect/implant lifecycle instructions—making it a high-misuse-risk artifact if packaged or distributed as a dependency within a software ecosystem.

No executable malware is present in the fragment itself; it is a plain-text post-exploitation playbook. However, it explicitly provides actionable steps for privilege escalation and persistence (authorized key injection and PAM/passwd persistence as fallback), plus reconnection and cleanup flows. In a supply-chain context, distributing such content materially increases misuse risk even without hidden/obfuscated execution.