Menu
Dedicated skill for collecting a host's routing/interface IPs and reflecting them in the MCP DB. Parses ip route/ip addr (ifconfig) output and saves via discover_host_routes.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
AITU Final multi-AI manager. Use when one AI is coordinating multiple Codex/Claude workers, workers ask what to do next, report blocked/done/high-value findings, or the user wants one manager to assign next tasks without manually maintaining a long dispatcher prompt.
Pivot/Tunneling autonomous skill: automatic segment detection from a single pivot IP, automatic SSH credential attempts, tunnel establishment (ligolo/ssh/chisel), internal network host/port discovery, and automatic MCP reflection (add_host/update_host/import_scan_data).
Automatic Bug Bounty report generation. Collects MCP data from report_id, host_ip:port, or host_ip:port bug_type, generates Description, registers/updates via web app, and saves attachments.
Automatic Risk report generation. Auto-infers the target from a Report ID, risk name, or the current MCP attack chain context to generate a Description, register in the web app, and save attachments.
AITU Final autonomous orchestrator. Use when the user says continue, keep going, do the next thing, or gives no target context. Read MCP state, lock onto one active risk objective, and dispatch scanning, web, AD, pivot, SCADA, and reporting without asking the user to choose a host or risk.
AD autonomous attack (token-optimized): enum -> BH/Kerberos -> spray -> privesc -> DCSync. If no arguments are given, automatically selects the next domain/DC target from MCP and proceeds.
| name | update-host-routes |
| description | Dedicated skill for collecting a host's routing/interface IPs and reflecting them in the MCP DB. Parses ip route/ip addr (ifconfig) output and saves via discover_host_routes. |
| argument-hint | <host_ip_or_cidr> |
Target: $ARGUMENTS
Argument parsing rules:
host_ip_or_cidr (required)
10.10.110.21 (single host)10.10.110.0/24 (bulk segment)ctf://hosts) belonging to that segment.discover_host_routes to save, then list_host_routes to verify.host_ip_or_cidr is in CIDR format (x.x.x.x/yy), process in segment mode; otherwise, process in host mode.heartbeat(sessionId).Build targetHosts (IP array).
host mode:
targetHosts = [host_ip_or_cidr]ctf://hosts, add_host(ip=<host_ip_or_cidr>, status="up", notes="route audit target")segment mode:
ctf://hosts and read the current DB host list.targetHosts if any of the following conditions are met.
host.segments[].segment.cidr == <target_cidr><target_cidr> range (fallback)add_note("no db hosts in segment: <target_cidr>") and terminate.Iterate through targetHosts and for each host, collect the following via available access methods (SSH, webshell, WinRM, etc.).
Linux preferred:
ip -o -4 addr show
ip route show
Fallback:
ifconfig -a
route -n
Save the raw output as add_loot(lootType="other", filename="route_<host_ip>.txt", ...) if needed.
For each host, always use discover_host_routes:
discover_host_routes(
hostIp=<host_ip>,
ipAddrOutput=<collected ip addr/ifconfig output>,
ipRouteOutput=<collected ip route/route output>,
replace=true
)
Use replace=true as default to overwrite with the current routing state.
For each host:
list_host_routes(hostIp=<host_ip>)0.0.0.0/0)connectedIp or srcIp)10.x.x.x/24)log_event(type="note", message="host routes updated: <host_ip>")add_host_route only when individual manual addition is needed.discover_host_routes when automatic parsing is possible.lxcbr* interfaces are excluded from automatic host-local segment creation targets (raw route data can still be saved).