Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

post-exploitation

Estrellas6

Forks0

Actualizado22 de mayo de 2026 a las 15:43

Post-exploitation techniques — lateral movement, privilege escalation, Active Directory attacks, credential harvesting, persistence, and data exfiltration. Use when shell access or valid credentials are already obtained on the target.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

JesusConwellpy

JesusConwellpy/ai-security-methodology

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

SKILL.md

readonly

name	post-exploitation
description	Post-exploitation techniques — lateral movement, privilege escalation, Active Directory attacks, credential harvesting, persistence, and data exfiltration. Use when shell access or valid credentials are already obtained on the target.
license	MIT
compatibility	Requires filesystem-based agent with bash, Python 3, and post-exploitation tools (Impacket, BloodHound, Mimikatz).
allowed-tools	Bash Read Write Edit Glob Grep
metadata	{"user-invocable":"true","argument-hint":"<phase or target-OS>"}

Post-Exploitation

Situational Awareness

# OS + kernel
uname -a && cat /etc/os-release 2>/dev/null
# Domain membership
[ -d /etc/krb5.conf ] && cat /etc/krb5.conf
# Network
ip a && ip route && arp -a
# Users + privileges
id && sudo -l 2>/dev/null
cat /etc/passwd | grep -E '/bin/(bash|sh)'

Document Map

Phase	Document
PsExec, WMI, WinRM, RDP, pass-the-hash/ticket, DCOM, SSH forwarding	Lateral Movement
Linux sudo/SUID/cron/kernel, Windows Potato/UAC/services/DLL hijack	Privilege Escalation
BloodHound, kerberoasting, DCSync, golden/silver ticket, ADCS, GPO abuse	Active Directory

Quick Linux Privesc

# SUID binaries
find / -perm -4000 -type f 2>/dev/null
# Sudo rights
sudo -l
# Writable cron/systemd
find /etc/cron* -writable -type f 2>/dev/null
# Capabilities
getcap -r / 2>/dev/null
# Active services (internal only)
ss -tlnp

Quick Windows Privesc

# whoami + privileges
whoami /priv
whoami /groups
# Services
sc query state= all | findstr "SERVICE_NAME"
icacls "C:\Program Files\*" | findstr "(F)"
# Scheduled tasks
schtasks /query /fo LIST /v
# AlwaysInstallElevated
reg query HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer /v AlwaysInstallElevated

Más de este repositorio

mismo repositorio

security-methodology

JesusConwellpy/ai-security-methodology

Security research methodology — 5-phase workflow (intake → recon → enum → hunt → report). Routes to specialized technique modules. Use when the user asks to audit, penetration test, bug bounty, find vulnerabilities, exploit a target, or perform any security assessment.

2026-05-236

ai-ml-security

JesusConwellpy/ai-security-methodology

AI/ML attack techniques — prompt injection, indirect/RAG poisoning, tool-calling manipulation, adversarial examples, model extraction, membership inference, training data extraction. Use when the target involves LLM agents, chatbots, ML model APIs, image classifiers, or federated learning systems.

2026-05-226

binary-exploitation

JesusConwellpy/ai-security-methodology

Binary exploitation techniques — buffer overflow, format string, heap exploitation, ROP, kernel exploitation, sandbox escape, shellcode. Use when the target is a native binary (ELF/PE), remote service with memory corruption, or kernel module. Requires pwntools, GDB, and binary analysis tools.

2026-05-226

crypto-attacks

JesusConwellpy/ai-security-methodology

Cryptography attack techniques — RSA, ECC, symmetric ciphers, hash collisions, PRNG attacks, lattice/LWE. Use when the challenge involves encryption, decryption, key recovery, nonce reuse, padding oracles, or cryptanalysis of custom schemes.

2026-05-226

forensics

JesusConwellpy/ai-security-methodology

Forensic analysis techniques — disk, memory, network, steganography, side-channel analysis. Use when given a disk image (.dd, .E01, .raw), memory dump (.vmem, .raw), packet capture (.pcap, .pcapng), image/audio file with hidden data, or side-channel trace.

2026-05-226

malware-analysis

JesusConwellpy/ai-security-methodology

Malware analysis techniques — static triaging, dynamic sandboxing, PE/.NET analysis, C2 protocol identification. Use when analyzing a suspicious binary, script, document, or network capture from a potentially compromised system.

2026-05-226

name	post-exploitation
description	Post-exploitation techniques — lateral movement, privilege escalation, Active Directory attacks, credential harvesting, persistence, and data exfiltration. Use when shell access or valid credentials are already obtained on the target.
license	MIT
compatibility	Requires filesystem-based agent with bash, Python 3, and post-exploitation tools (Impacket, BloodHound, Mimikatz).
allowed-tools	Bash Read Write Edit Glob Grep
metadata	{"user-invocable":"true","argument-hint":"<phase or target-OS>"}

Post-Exploitation

Situational Awareness

# OS + kernel
uname -a && cat /etc/os-release 2>/dev/null
# Domain membership
[ -d /etc/krb5.conf ] && cat /etc/krb5.conf
# Network
ip a && ip route && arp -a
# Users + privileges
id && sudo -l 2>/dev/null
cat /etc/passwd | grep -E '/bin/(bash|sh)'

Document Map

Phase	Document
PsExec, WMI, WinRM, RDP, pass-the-hash/ticket, DCOM, SSH forwarding	Lateral Movement
Linux sudo/SUID/cron/kernel, Windows Potato/UAC/services/DLL hijack	Privilege Escalation
BloodHound, kerberoasting, DCSync, golden/silver ticket, ADCS, GPO abuse	Active Directory

Quick Linux Privesc

# SUID binaries
find / -perm -4000 -type f 2>/dev/null
# Sudo rights
sudo -l
# Writable cron/systemd
find /etc/cron* -writable -type f 2>/dev/null
# Capabilities
getcap -r / 2>/dev/null
# Active services (internal only)
ss -tlnp

Quick Windows Privesc

# whoami + privileges
whoami /priv
whoami /groups
# Services
sc query state= all | findstr "SERVICE_NAME"
icacls "C:\Program Files\*" | findstr "(F)"
# Scheduled tasks
schtasks /query /fo LIST /v
# AlwaysInstallElevated
reg query HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer /v AlwaysInstallElevated