skills.rest
defconxt
defconxtCOMMUNITY
Explore all skills by this author →
GitHub

Red Team — Post-Exploitation

Document Linux and Windows post-exploitation techniques for red team engagements.

Updated Aug 23, 2026
Search Tags:#privilege escalation#red team#post-exploitation#metasploit#evasion#c2#sliver
One-click install
npx skills add https://github.com/defconxt/CIPHER --skill red-team-post-exploitation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Red Team — Post-Exploitation
Source: https://github.com/defconxt/CIPHER/tree/main/skills/red-team/post-exploitation
Command: npx skills add https://github.com/defconxt/CIPHER --skill red-team-post-exploitation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides comprehensive guidance and commands for advanced post-exploitation techniques in red team engagements, covering privilege escalation, C2 operations, evasion, and persistence.

Core Features & Use Cases

  • Privilege Escalation: Detailed methods for Linux and Windows privilege escalation.
  • C2 Operations: Instructions for using Sliver and Metasploit for command and control.
  • Evasion Techniques: Strategies for bypassing AMSI, AV, and EDR.
  • Persistence & Pivoting: Methods for maintaining access and moving laterally within a network.
  • Use Case: A red team operator needs to escalate privileges on a compromised Linux host. They can consult this Skill for automated enumeration scripts, SUID abuse, sudo misconfigurations, and kernel exploit suggestions.

Quick Start

Use the Red Team Post-Exploitation skill to find Linux privilege escalation vectors.

Frequently Asked Questions about Red Team — Post-Exploitation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I escalate privileges on a compromised Linux host during a red team engagement?▼

Privilege escalation on a compromised Linux host is achieved by using automated enumeration scripts to identify SUID abuse, sudo misconfigurations, and kernel exploits for gaining root access.

What is the best way to set up C2 operations using Sliver or Metasploit?▼

Setting up C2 operations with Sliver and Metasploit involves deploying command and control infrastructure to manage compromised hosts, execute payloads, and maintain communication channels during red team engagements.

How can I bypass AMSI, AV, and EDR evasion mechanisms during post-exploitation?▼

Bypassing AMSI, AV, and EDR evasion mechanisms requires applying specific anti-patterns and evasion strategies to execute payloads undetected, ensuring operational security during post-exploitation activities.

Can I use this skill for both Linux and Windows post-exploitation environments?▼

Yes, this skill provides advanced post-exploitation techniques tailored for both Linux and Windows environments, covering specific command-line tools, network pivoting, and persistence mechanisms across both operating systems.

How do I maintain persistence and move laterally within a target network?▼

Maintaining persistence and moving laterally within a target network involves deploying specific persistence mechanisms and network pivoting techniques to retain access and expand control across interconnected systems.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

c2

Establish framework-agnostic C2 infrastructure with HTTPS, DNS, mTLS, and WireGuard channels.

Community
Advanced
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
xijunwwxijunww
1

intranet-pentest

Automate intranet penetration testing from reconnaissance to reporting.

Community
Advanced
alicangnllalicangnll

Linux Driver Exploit

Identify and exploit Linux kernel module vulnerabilities for privilege escalation.

Community
Advanced