skills.rest
0x0pointer
0x0pointerOFFICIAL
Explore all skills by this author →
GitHub

post-exploit

Escalate privileges, harvest credentials, and enumerate compromised Linux and Windows hosts.

13|1|Updated Feb 4, 2026
Search Tags:#linux#privilege escalation#windows#enumeration#post-exploitation#credential harvesting#pivot
One-click install
npx skills add https://github.com/0x0pointer/skills --skill post-exploit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: post-exploit
Source: https://github.com/0x0pointer/skills/tree/main/post-exploit
Command: npx skills add https://github.com/0x0pointer/skills --skill post-exploit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It provides an end‑to‑end post‑exploitation workflow that turns initial access into full system control, privilege escalation, credential harvesting, persistence assessment, and pivot preparation for both Linux and Windows targets.

Core Features & Use Cases

  • Depth Presets: Quick, standard, and thorough modes tailor enumeration and exploitation effort.
  • Tool Integration: Leverages Kali tools, GTFOBins, PEAS enumerations, token‑abuse techniques, and container‑escape methods.
  • Decision Trees & Tables: Structured privilege‑escalation paths for SUID, sudo, capabilities, and Windows token attacks.
  • Reporting API: Automatically logs findings, diagrams, and dashboards via the built‑in report actions.
  • Use Case: After obtaining a shell on a Linux box, run the skill to discover privilege‑escalation vectors, dump credentials, assess persistence mechanisms, and generate a pivot plan for lateral movement.

Quick Start

Invoke the skill with /post-exploit <target> os=linux access=shell depth=standard to begin the post‑exploitation workflow.

Frequently Asked Questions about post-exploit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate privilege escalation and credential harvesting after getting a shell on Linux or Windows?▼

To automate privilege escalation and credential harvesting after getting a shell, use the post-exploit skill with `os=linux access=shell depth=standard`. It orchestrates Kali tools, GTFOBins, and PEAS enumerations to elevate, harvest, and prepare pivot points on compromised hosts.

What is the best way to enumerate local environments and prepare pivot points on compromised hosts?▼

The best way to enumerate local environments and prepare pivot points is by running a post-exploitation workflow that orchestrates Kali tools and PEAS enumerations. It assesses persistence mechanisms and generates a structured pivot plan for lateral movement.

Can I use post-exploitation techniques over SSH, RDP, or WinRM sessions?▼

Yes, post-exploitation techniques can be used over SSH, RDP, or WinRM sessions. The skill operates on both Linux and Windows targets after initial access, supporting these session types to elevate privileges and harvest credentials.

How do decision trees and tables help with SUID, sudo, and Windows token attacks?▼

Decision trees and tables help with SUID, sudo, and Windows token attacks by providing structured privilege-escalation paths. They guide the exploitation process using GTFOBins and token-abuse techniques to ensure reliable elevation.

What depth presets are available to control enumeration and exploitation effort?▼

Quick, standard, and thorough depth presets are available to control enumeration and exploitation effort. These modes tailor the post-exploitation workflow, allowing you to manage the intensity of local environment enumeration and privilege escalation.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

lateral-movement

Plan credential-based lateral movement across hosts using SSH, WinRM, WMI, PSExec, or RDP.

Official
Advanced
melikhanmutlumelikhanmutlu

red-team-tactics

Coordinate offensive security assessments with a structured red-team workflow and reporting framework.

Community
Advanced
0x0pointer0x0pointer
13

lateral-movement

Identify and exploit Active Directory lateral movement paths using credential reuse and relay techniques.

Official
Advanced
mindcockpit-aimindcockpit-ai
11

ctf-pentesting

Guide penetration testing and CTF workflows across recon, enumeration, exploitation, and privilege escalation.

Official
Intermediate