Linux Post-Exploitation Methodology
Linux post-exploitation uses native tools and scripting for credential harvesting, privilege escalation, persistence, lateral movement, defense evasion, data exfiltration, and network attacks. After gaining a shell on a Linux target, these 118 programs across 8 categories provide comprehensive offensive capabilities — from /etc/shadow extraction to kernel exploit checks, from cron/systemd persistence to DNS tunnel exfiltration, from SELinux/AppArmor bypass to ARP spoofing.
Score33
How is this score calculated?
- Weighted across six dimensions, scored 0-100.
- Provenance (25): listed in an official or curated registry.
- Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
- Maintenance (20): recency of the last push; archived entries score zero here.
- Adoption (20): repository stars on a log curve.
- Documentation (10) and description quality (10): parsed manifest or SKILL.md frontmatter, and a real description rather than a placeholder.
- Dimensions a source cannot supply — registries publish no stars or license — are excluded from the entry's own average instead of counted as zero, so entries stay comparable across sources.
- Security signals subtract up to 20. Scores are recomputed on every daily ingest.
codex skill install harezadmm/omp-enhancedDetails