post-exploitation

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an offensive post‑exploitation playbook describing reverse shells, credential harvesting, privilege escalation, persistence, C2 channels, evasion (AMSI/syscalls), and credential cracking—all indicative of deliberate malicious intent and abuse-ready techniques.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs post-exploitation actions (reverse shells, sudo enumeration, persistence via cron/systemd/authorized_keys/LD_PRELOAD, kernel modules, service manipulation, container escape, etc.), which directly modify host state and enable privileged compromise.