awesome-pentest-tools-catalog
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a vast array of shell commands for various security tools (Nmap, Masscan, SQLMap, etc.) and includes Python scripts that use
subprocess.run()to execute these tools. - [EXTERNAL_DOWNLOADS]: Contains instructions for installing numerous security tools via package managers (go install, pip install) and direct downloads (curl, wget) from third-party repositories.
- [REMOTE_CODE_EXECUTION]: Includes a PowerShell download-and-execute cradle (
IEX (New-Object Net.WebClient).DownloadString(...)) used as an example for the PowerUp tool. This pattern is commonly used for executing remote scripts directly in memory. - [PRIVILEGE_ESCALATION]: Specifically documents tools and methods for privilege escalation on both Linux and Windows systems, including LinPEAS, WinPEAS, and PowerUp.
- [PERSISTENCE]: Catalogs Command & Control (C2) frameworks (Sliver, Empire) and webshell managers (Behinder, Godzilla), which are used for maintaining access during security assessments.
- [DYNAMIC_EXECUTION]: Includes techniques for upgrading basic shells to interactive TTY sessions using Python's
pty.spawnmodule and managing dynamic tunnel configurations.
Audit Metadata