skills.rest
duriandurino
duriandurinoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

post

Automate privilege escalation checks and credential harvesting on compromised Linux systems.

Updated Aug 23, 2026
Search Tags:#penetration testing#persistence#privilege escalation#red team#post-exploitation#lateral movement#credential harvesting
One-click install
npx skills add https://github.com/duriandurino/openclawrino --skill post-duriandurino
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: post
Source: https://github.com/duriandurino/openclawrino/tree/main/post
Command: npx skills add https://github.com/duriandurino/openclawrino --skill post-duriandurino

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, wget, python3, bash, find, getcap, sudo, ss, netstat, grep, john, hashcat, ssh, proxychains, nmap, crackmapexec, evil-winrm, import, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you move beyond initial access by providing tools and strategies for privilege escalation, establishing persistence, harvesting credentials, and gathering critical intelligence on a compromised system.

Core Features & Use Cases

  • Privilege Escalation: Automates checks for common Linux privilege escalation vectors (SUID, sudo, kernel exploits, etc.).
  • Credential Harvesting: Provides commands to find sensitive information like SSH keys, configuration file passwords, and bash history.
  • Lateral Movement & Persistence: Offers techniques for moving to other systems and establishing a foothold.
  • Evidence Gathering: Guides the collection of system information and discovered data for reporting.
  • Use Case: After gaining a shell on a target system, use this Skill to quickly identify ways to escalate to root privileges, find user credentials, and then pivot to other machines on the network.

Quick Start

Use the post skill to check for privilege escalation opportunities on the current host.

Frequently Asked Questions about post

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate privilege escalation checks on a compromised Linux host?▼

Automating privilege escalation involves scanning for SUID misconfigurations, sudo permissions, and kernel exploits using bash scripts and tools like getcap. This framework provides automated scripts to identify these vectors and escalate to root privileges.

What is the best way to harvest credentials like SSH keys and config passwords during post-exploitation?▼

Credential harvesting in post-exploitation is performed by parsing bash history, extracting SSH keys, and searching configuration files using find and grep. This skill provides targeted commands to locate and extract sensitive data across the compromised system.

Can I use this for lateral movement and pivoting to other machines on the network?▼

Yes, lateral movement is supported through techniques utilizing proxychains, ssh, nmap, and crackmapexec. You can pivot to other network machines by leveraging harvested credentials and mapping internal network topology.

Does this post-exploitation framework support cracking hashed passwords found on the target?▼

The framework integrates with john and hashcat for cracking hashed credentials. You can extract password hashes from the compromised Linux system and execute offline cracking commands to recover plaintext passwords.

How do I establish persistence after gaining an initial shell on a Linux target?▼

Establishing persistence involves deploying foothold mechanisms using bash and python3 scripts. This skill offers reference commands to maintain access across reboots and user sessions on the compromised Linux environment.

Do I need to manually run commands or are there automated scripts for system reconnaissance?▼

System reconnaissance utilizes both automated scripts and manual command references. You can execute provided scripts to gather system information rapidly or run specific commands using ss and netstat for targeted intelligence collection.

Related Skills

Explore More Software Engineering Skills→
0x0pointer0x0pointer
13

post-exploit

Escalate privileges, harvest credentials, and enumerate compromised Linux and Windows hosts.

Official
Advanced
aivos-xieaivos-xie
1

cloud-security

Audit and penetration test AWS, Azure, GCP, and Kubernetes environments.

Community
Advanced
darblexdarblex

Nmap Recon

Scan targets with Nmap to find open ports and detect services.

Community
Intermediate
brucesongsbrucesongs
60

privilege-escalation

Identify and exploit privilege escalation vectors on Linux and Windows.

Community
Advanced