The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for the agent to execute numerous security tools, including Nmap, Hydra, Medusa, Ncrack, and Metasploit (msfconsole), to perform network scanning and credential brute-forcing.
[EXTERNAL_DOWNLOADS]: The documentation references several external GitHub repositories and resources for specialized security tools such as SSH-Snake (for automated lateral movement), ssh-mitm (for man-in-the-middle attacks), and wordlists from the SecLists project.
[PRIVILEGE_ESCALATION]: The methodology includes specific steps for identifying and exploiting high-impact vulnerabilities, such as CVE-2024-6387 (regreSSHion) and CVE-2024-3094 (xz backdoor), to obtain root access on target systems.
[DATA_EXFILTRATION]: The skill describes techniques for locating and extracting sensitive information from a target host, such as SSH private keys (e.g., id_rsa, id_ed25519) and authorized_keys files, to facilitate lateral movement within a network environment.

ssh-pentesting