payloads-file-transfers
Fail
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides templates for downloading scripts such as
linpeas.shfrom a remote attacker-controlled host ($LHOST) usingwgetandcurl. These patterns are used to stage and facilitate the execution of external tools. - [DATA_EXFILTRATION]: Provides explicit instructions for moving sensitive data off a target system using network utilities like
nc(netcat) andscp, or via Base64 encoding for manual transfer through restricted shells. - [COMMAND_EXECUTION]: Instructs the use of built-in Windows utilities such as
certutil,bitsadmin, andPowerShellto download external executables, a common technique for bypassing security monitoring. - [PRIVILEGE_ESCALATION]: Explicitly references tools like
linpeas.sh, which are specifically used to automate the discovery of privilege escalation vulnerabilities on Linux systems.
Recommendations
- HIGH: Downloads and executes remote code from: http://$LHOST/linpeas.sh - DO NOT USE without thorough review
Audit Metadata