Ethical Hacking Methodology
Warn
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples for running powerful security tools, including Nmap for network scanning, Metasploit for exploitation, SQLMap for automated SQL injection, and Hydra for password brute-forcing.
- [PRIVILEGE_ESCALATION]: The methodology covers methods for increasing access levels on targets, such as searching for SUID binaries, checking sudo permissions via
sudo -l, and running local enumeration scripts likelinpeas.shorwinpeas.exe. - [PERSISTENCE]: There are explicit instructions for maintaining long-term access to a system, including using the Meterpreter persistence script, adding unauthorized SSH keys to the
authorized_keysfile, and creating persistent backdoors via scheduled cron jobs. - [DATA_EXFILTRATION]: The skill describes techniques for finding and accessing sensitive information, such as Google Dorking for files containing credentials (e.g.,
.env,.config) and using command injection to retrieve the contents of/etc/passwd.
Audit Metadata