ethical-hacking-methodology
Warn
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: MEDIUMPERSISTENCEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill provides explicit instructions and commands for maintaining access to a target system, including the use of Metasploit's Meterpreter persistence module, adding keys to the SSH authorized_keys file, and creating cron jobs.
- [PRIVILEGE_ESCALATION]: Includes techniques for elevating system permissions such as identifying SUID binaries, checking sudo privileges with 'sudo -l', and utilizing external enumeration scripts like 'linpeas.sh', 'linux-exploit-suggester.sh', 'winpeas.exe', and 'windows-exploit-suggester.py'.
- [COMMAND_EXECUTION]: Details the use of numerous security tools that involve active probing and exploitation of remote systems, including 'nmap', 'msfconsole', 'sqlmap', 'hydra', and 'gobuster'.
- [DATA_EXFILTRATION]: Provides example command injection payloads intended to read sensitive system configuration and identity files, specifically referencing 'cat /etc/passwd'.
- [EXTERNAL_DOWNLOADS]: References the download of security-focused operating system images from 'kali.org' and various auditing scripts from external repositories.
Audit Metadata