The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references several external security resources and documentation sites, including the MITRE ATT&CK and D3FEND frameworks, NIST publications, and well-known community projects like GTFOBins and PayloadsAllTheThings. These are recognized industry resources.
[PRIVILEGE_ESCALATION]: The playbook describes conceptual techniques for escalating privileges, such as exploiting kernel vulnerabilities, misconfigured sudoers files, and SUID binaries, but provides no exploit code.
[CREDENTIALS_UNSAFE]: Mentions common locations for sensitive data (e.g., /etc/shadow, cloud metadata services, and SSH keys) as targets for discovery during a pentest engagement.
[COMMAND_EXECUTION]: Discusses the use of offensive tool classes like Mimikatz, Responder, and BloodHound within the context of red-team methodology and detection tuning.
[PERSISTENCE]: Outlines various persistence mechanisms (e.g., scheduled tasks, registry keys, and cron jobs) that are typically analyzed or demonstrated during security assessments, emphasizing the need for cleanup after the engagement.

post-exploit