linux-pentester-notes
Fail
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for downloading and immediately executing scripts from external sources, such as piping content from GitHub directly into the shell and fetching payloads from attacker-controlled IP addresses.
- [COMMAND_EXECUTION]: Contains multiple implementations of reverse shells using Bash, Netcat, and Python designed to provide remote access to a host system.
- [DATA_EXFILTRATION]: Includes commands for archiving sensitive system and user directories (such as /etc and /home) and transmitting the data to a remote listener via network tools.
- [COMMAND_EXECUTION]: Provides explicit methods for maintaining persistence on a target system, including the creation of backdoor users, unauthorized modification of SSH authorized_keys, and the installation of malicious cron jobs.
- [COMMAND_EXECUTION]: Outlines various privilege escalation techniques, such as abusing Sudo misconfigurations, SUID/SGID binary exploitation, and PATH environment variable hijacking to gain root access.
- [COMMAND_EXECUTION]: Includes instructions for clearing system logs and history files to conceal malicious activity and bypass auditing.
Recommendations
- HIGH: Downloads and executes remote code from: http://$ATTACKER_IP:8000/payload.sh, https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh - DO NOT USE without thorough review
- CRITICAL: 1 infected file(s) detected - DO NOT USE
- AI detected serious security threats
Audit Metadata