payloads-file-transfers

Fail

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPRIVILEGE_ESCALATION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides templates for downloading scripts such as linpeas.sh from a remote attacker-controlled host ($LHOST) using wget and curl. These patterns are used to stage and facilitate the execution of external tools.
  • [DATA_EXFILTRATION]: Provides explicit instructions for moving sensitive data off a target system using network utilities like nc (netcat) and scp, or via Base64 encoding for manual transfer through restricted shells.
  • [COMMAND_EXECUTION]: Instructs the use of built-in Windows utilities such as certutil, bitsadmin, and PowerShell to download external executables, a common technique for bypassing security monitoring.
  • [PRIVILEGE_ESCALATION]: Explicitly references tools like linpeas.sh, which are specifically used to automate the discovery of privilege escalation vulnerabilities on Linux systems.
Recommendations
  • HIGH: Downloads and executes remote code from: http://$LHOST/linpeas.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 15, 2026, 10:31 AM