post-exploit

Escalate privileges, harvest credentials, and enumerate compromised Linux and Windows hosts.

13|1|Updated Feb 4, 2026

Search Tags:#linux #privilege escalation #windows #enumeration #post-exploitation #credential harvesting #pivot

Ready to run

npx skills add https://github.com/0x0pointer/skills --skill post-exploit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: post-exploit
Source: https://github.com/0x0pointer/skills/tree/main/post-exploit
Command: npx skills add https://github.com/0x0pointer/skills --skill post-exploit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It provides an end‑to‑end post‑exploitation workflow that turns initial access into full system control, privilege escalation, credential harvesting, persistence assessment, and pivot preparation for both Linux and Windows targets.

Core Features & Use Cases

Depth Presets: Quick, standard, and thorough modes tailor enumeration and exploitation effort.
Tool Integration: Leverages Kali tools, GTFOBins, PEAS enumerations, token‑abuse techniques, and container‑escape methods.
Decision Trees & Tables: Structured privilege‑escalation paths for SUID, sudo, capabilities, and Windows token attacks.
Reporting API: Automatically logs findings, diagrams, and dashboards via the built‑in report actions.
Use Case: After obtaining a shell on a Linux box, run the skill to discover privilege‑escalation vectors, dump credentials, assess persistence mechanisms, and generate a pivot plan for lateral movement.

Quick Start

Invoke the skill with /post-exploit <target> os=linux access=shell depth=standard to begin the post‑exploitation workflow.

Frequently Asked Questions about post-exploit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate privilege escalation and credential harvesting after getting a shell on Linux or Windows?▼

To automate privilege escalation and credential harvesting after getting a shell, use the post-exploit skill with `os=linux access=shell depth=standard`. It orchestrates Kali tools, GTFOBins, and PEAS enumerations to elevate, harvest, and prepare pivot points on compromised hosts.

What is the best way to enumerate local environments and prepare pivot points on compromised hosts?▼

The best way to enumerate local environments and prepare pivot points is by running a post-exploitation workflow that orchestrates Kali tools and PEAS enumerations. It assesses persistence mechanisms and generates a structured pivot plan for lateral movement.

Can I use post-exploitation techniques over SSH, RDP, or WinRM sessions?▼

Yes, post-exploitation techniques can be used over SSH, RDP, or WinRM sessions. The skill operates on both Linux and Windows targets after initial access, supporting these session types to elevate privileges and harvest credentials.

How do decision trees and tables help with SUID, sudo, and Windows token attacks?▼

Decision trees and tables help with SUID, sudo, and Windows token attacks by providing structured privilege-escalation paths. They guide the exploitation process using GTFOBins and token-abuse techniques to ensure reliable elevation.

What depth presets are available to control enumeration and exploitation effort?▼

Quick, standard, and thorough depth presets are available to control enumeration and exploitation effort. These modes tailor the post-exploitation workflow, allowing you to manage the intensity of local environment enumeration and privilege escalation.