Red Team — Post-Exploitation

Name: Red Team — Post-Exploitation
Availability: InStock
Author: defcon

Document Linux and Windows post-exploitation techniques for red team engagements.

Updated Aug 23, 2026

Search Tags:#privilege escalation #red team #post-exploitation #metasploit #evasion #c2 #sliver

Ready to run

npx skills add https://github.com/defconxt/CIPHER --skill red-team-post-exploitation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Red Team — Post-Exploitation
Source: https://github.com/defconxt/CIPHER/tree/main/skills/red-team/post-exploitation
Command: npx skills add https://github.com/defconxt/CIPHER --skill red-team-post-exploitation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides comprehensive guidance and commands for advanced post-exploitation techniques in red team engagements, covering privilege escalation, C2 operations, evasion, and persistence.

Core Features & Use Cases

Privilege Escalation: Detailed methods for Linux and Windows privilege escalation.
C2 Operations: Instructions for using Sliver and Metasploit for command and control.
Evasion Techniques: Strategies for bypassing AMSI, AV, and EDR.
Persistence & Pivoting: Methods for maintaining access and moving laterally within a network.
Use Case: A red team operator needs to escalate privileges on a compromised Linux host. They can consult this Skill for automated enumeration scripts, SUID abuse, sudo misconfigurations, and kernel exploit suggestions.

Quick Start

Use the Red Team Post-Exploitation skill to find Linux privilege escalation vectors.

Frequently Asked Questions about Red Team — Post-Exploitation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I escalate privileges on a compromised Linux host during a red team engagement?▼

Privilege escalation on a compromised Linux host is achieved by using automated enumeration scripts to identify SUID abuse, sudo misconfigurations, and kernel exploits for gaining root access.

What is the best way to set up C2 operations using Sliver or Metasploit?▼

Setting up C2 operations with Sliver and Metasploit involves deploying command and control infrastructure to manage compromised hosts, execute payloads, and maintain communication channels during red team engagements.

How can I bypass AMSI, AV, and EDR evasion mechanisms during post-exploitation?▼

Bypassing AMSI, AV, and EDR evasion mechanisms requires applying specific anti-patterns and evasion strategies to execute payloads undetected, ensuring operational security during post-exploitation activities.

Can I use this skill for both Linux and Windows post-exploitation environments?▼

Yes, this skill provides advanced post-exploitation techniques tailored for both Linux and Windows environments, covering specific command-line tools, network pivoting, and persistence mechanisms across both operating systems.

How do I maintain persistence and move laterally within a target network?▼

Maintaining persistence and moving laterally within a target network involves deploying specific persistence mechanisms and network pivoting techniques to retain access and expand control across interconnected systems.