skills.rest
xjtu-wang
xjtu-wangCOMMUNITY
Explore all skills by this author →
GitHub

competition-linux-credential-pivot

Trace Linux credential artifacts and host-to-host pivot chains in sandboxed environments.

4|Updated Apr 9, 2026
Search Tags:#credentials#linux#sandbox#ctf#forensics#pivot#replay
One-click install
npx skills add https://github.com/xjtu-wang/DigAgent --skill competition-linux-credential-pivot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: competition-linux-credential-pivot
Source: https://github.com/xjtu-wang/DigAgent/tree/main/.agents/skills/competition-linux-credential-pivot
Command: npx skills add https://github.com/xjtu-wang/DigAgent --skill competition-linux-credential-pivot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

After the ctf-sandbox-orchestrator is active, this skill helps trace Linux credential material, service tokens, and related trust edges to support secure pivot decisions and evidence collection in a sandboxed environment.

Core Features & Use Cases

  • Map credential artifacts across SSH keys, agent sockets, kubeconfigs, cloud tokens, and service-account secrets, plus environment vars, config files, and namespace boundaries.
  • Prove replay paths and pivot chains from recovered artifacts to the target privilege or host, enabling reproducible, minimal chains for verification.
  • Provide end-to-end guidance for narrowing a chain to a decisive Linux pivot, and hand off to kernel/container escape skills if needed after sandbox context is established.

Quick Start

Map credential artifacts, identify accepting services, and reproduce a minimal artifact-to-privilege pivot chain.

Frequently Asked Questions about competition-linux-credential-pivot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I trace Linux credential artifacts to find pivot paths in a sandboxed CTF environment?▼

Trace Linux credential artifacts by mapping SSH keys, kubeconfigs, cloud tokens, and service-account secrets to identify accepting services and reproduce a minimal pivot chain for capability gain verification.

What credential materials are mapped when investigating Linux lateral movement?▼

Linux lateral movement investigations map credential artifacts across SSH keys, agent sockets, kubeconfigs, cloud tokens, service-account secrets, environment variables, config files, and namespace boundaries to discover trust edges.

How do I prove a replay path from recovered credentials to a target privilege?▼

Prove replay paths by reproducing a minimal artifact-to-privilege pivot chain from recovered credential materials to the target host, ensuring the pivot chain is reproducible and decisive for verification.

Can I use this skill for Linux privilege-escalation forensics outside of sandboxed challenge environments?▼

Linux privilege-escalation forensics are supported specifically within sandboxed challenge environments after the ctf-sandbox-orchestrator is activated, focusing on credential tracing and host-to-host pivots in that context.

What should I do after establishing a minimal pivot chain for capability gain?▼

After establishing a minimal pivot chain proving capability gain, hand off to kernel or container escape skills if further escalation is needed, once the sandbox context and credential artifacts are fully mapped.

Why do I need the ctf-sandbox-orchestrator active before tracing credential pivots?▼

The ctf-sandbox-orchestrator must be active first because this skill traces Linux credential material, service tokens, and trust edges to support secure pivot decisions and evidence collection within that sandboxed environment.

Related Skills

Explore More Software Engineering Skills→
xjtu-wangxjtu-wang
4

competition-pcap-protocol

Reconstruct TCP/UDP sessions from PCAP captures and decode HTTP, WebSocket, and DNS protocols.

Community
Advanced
alicangnllalicangnll

Container Escape

Detect container escape vulnerabilities and privilege escalation paths in Docker and Kubernetes environments.

Community
Advanced
xjtu-wangxjtu-wang
4

competition-lsass-ticket-material

Trace sandboxed credential artifacts and identify replayable ones.

Community
Advanced
RheasilviaRheasilvia

github-auth

Configure GitHub authentication using HTTPS tokens, SSH keys, or gh CLI sessions.

Community
Intermediate