The Agent Skills Directory

[PERSISTENCE]: The skill provides explicit commands for maintaining access to a target system after an initial compromise. This includes modifying system configuration files to run scripts automatically and altering authentication mechanisms.
Evidence: The workflow includes echo "* * * * * /tmp/backdoor.sh" >> /etc/crontab for cron-based persistence.
Evidence: Instructions to add an attacker's public key to ~/.ssh/authorized_keys for persistent SSH access.
Evidence: Reference to meterpreter> run persistence -X for automated Meterpreter backdoors.
[PRIVILEGE_ESCALATION]: Multiple sections describe techniques to gain higher-level permissions on Linux and Windows systems.
Evidence: Checking for SUID binaries with find / -perm -4000 and examining sudo permissions with sudo -l.
Evidence: Reference to escalation scripts such as linpeas.sh, linux-exploit-suggester.sh, and winpeas.exe.
[DATA_EXFILTRATION]: The reconnaissance and scanning phases describe methods for harvesting sensitive information from targets.
Evidence: Use of theHarvester for email discovery.
Evidence: Google Dorks targeting sensitive files including filetype:config, filetype:env, and directories containing passwords.
Evidence: Command injection testing patterns such as | cat /etc/passwd which targets sensitive system files.
[COMMAND_EXECUTION]: The skill details the use of offensive security tools to execute commands and exploit vulnerabilities on remote systems.
Evidence: Active exploitation via msfconsole (Metasploit) and sqlmap for database intrusion.
Evidence: Brute-force attacks against services like SSH and FTP using hydra and john (John the Ripper).

Ethical Hacking Methodology