The Agent Skills Directory

[PERSISTENCE]: The skill provides instructions to establish persistence on a target system by appending an SSH public key to the ~/.ssh/authorized_keys file.
[DATA_EXFILTRATION]: The skill includes commands to search for and read highly sensitive information, including private SSH keys (id_rsa, id_dsa, etc.) in standard and non-standard locations, as well as the .bash_history file which often contains plaintext credentials.
[COMMAND_EXECUTION]: The skill makes extensive use of powerful offensive security tools such as Nmap, Hydra, Medusa, and the Metasploit Framework to perform network scanning, service enumeration, and credential attacks.
[DYNAMIC_EXECUTION]: The skill includes a Python script utilizing the paramiko library to programmatically execute shell commands on remote systems via client.exec_command().
[CREDENTIALS_UNSAFE]: The workflow includes patterns for searching file systems and command histories for hardcoded passwords and secrets using string matching (e.g., grep -i pass).

ssh-penetration-testing