The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs users to download a repository from an unverified GitHub account (HIMANSHUSHARMA20/Linux-for-a-Pentester) for offline access and testing purposes.
[REMOTE_CODE_EXECUTION]: The documentation provides multiple ready-to-use reverse shell payloads including:
Bash one-liners using /dev/tcp redirection.
Netcat commands with the -e flag and named pipe (mkfifo) alternatives.
Python and PHP scripts designed to establish outbound network connections and spawn interactive shells.
[PERSISTENCE]: The skill includes several persistence techniques:
The installation process modifies the user's shell profile (~/.bashrc) to add an alias.
Detailed commands for adding SSH keys to authorized_keys.
Instructions for creating a hidden backdoor user account with sudo privileges.
Commands to establish persistent reverse shells via root crontab entries.
[PRIVILEGE_ESCALATION]: Extensive guidance on bypassing security controls and gaining root access is provided, including:
Identification and exploitation of SUID/SGID binaries.
Sudo bypass techniques targeting specific vulnerabilities (CVE-2019-14287).
Exploitation of LD_PRELOAD environment variables to inject malicious shared libraries.
[DYNAMIC_EXECUTION]: The skill provides a workflow for runtime compilation of C source code into a shared object (.so) file using gcc, which is then used for privilege escalation via LD_PRELOAD.
[COMMAND_EXECUTION]: The skill details methods for log cleanup and anti-forensics, such as clearing bash_history and truncating system log files like auth.log and syslog to hide activity.

linux-pentester-commands