agentsclimarketplace
Sign in

Pentest priv escalation

Skill 0x-Professor/Agent-Skills-Hub/skills/pentest-priv-escalation

Assess Linux and Windows privilege escalation vectors from existing authorized footholds.From its SKILL.md

Install
npx -y skills add 0x-Professor/Agent-Skills-Hub --skill pentest-priv-escalation

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 10 stars10 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
  • runs commandsInstructs the agent to run 1 command, including `python skills/pentest-priv-escalation/scripts/priv_escalation.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run`.

SKILL.md

1.3 KB, 283 tokens by cl100k_base, as published. Nobody here has run it

Pentest Priv Escalation

Stage

  • PTES: 6
  • MITRE: TA0004

Objective

Identify reproducible routes from constrained users to elevated privileges.

Required Workflow

  1. Validate scope before any active action and reject out-of-scope targets.
  2. Run only authorized checks aligned to PTES, OWASP WSTG, NIST SP 800-115, and MITRE ATT&CK.
  3. Write findings in canonical finding_schema format with reproducible PoC notes.
  4. Honor dry-run mode and require explicit --i-have-authorization for live execution.
  5. Export deterministic artifacts for downstream skill consumption.

Execution

python skills/pentest-priv-escalation/scripts/priv_escalation.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run

Outputs

  • privesc-findings.json
  • privesc-report.json

References

  • references/tools.md
  • skills/autonomous-pentester/shared/scope_schema.json
  • skills/autonomous-pentester/shared/finding_schema.json

Legal and Ethical Notice

WARNING AUTHORIZED USE ONLY
This skill executes real security testing tools against live targets.
Use only with written authorization.

What ships with it: 4 files

4.4 KB alongside SKILL.md, 1 of them executable

agents/

assets/

references/

scripts/

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.