linux-privilege-escalation

Fail

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDATA_EXFILTRATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the agent to download a shell script from a remote GitHub repository and pipe it directly into a shell execution environment (e.g., curl -L https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh | sh). This allows for arbitrary code execution from a third-party source.\n- [COMMAND_EXECUTION]: Provides numerous commands for system enumeration and exploitation, including the setup of interactive reverse shells using Bash, Python, Netcat, and Perl. These shells allow a remote actor to gain control over the system context.\n- [PRIVILEGE_ESCALATION]: The core functionality involves identifying and exploiting vulnerabilities to gain root-level access. Techniques include kernel exploitation, Sudo abuse (using commands like find or vim to spawn root shells), SUID binary exploitation, and hijacking system paths.\n- [DYNAMIC_EXECUTION]: Includes instructions for compiling C source code into executable binaries and shared libraries on the target machine, which are then used for local privilege escalation.\n- [DATA_EXFILTRATION]: Contains instructions for accessing highly sensitive system files such as /etc/shadow and transferring data to an external, potentially attacker-controlled IP address.\n- [EXTERNAL_DOWNLOADS]: Downloads various tools and exploit payloads from external servers, including user-defined IP addresses.
Recommendations
  • HIGH: Downloads and executes remote code from: https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 17, 2026, 03:13 PM
Security Audit — agent-trust-hub — linux-privilege-escalation