Skip to content
Get packs

Post-Exploitation and Cracking Playbook

Guides an agent through privilege escalation, lateral movement, hash cracking and crypto attacks in pentests

Source Download skill
Repository
AIPentest/CyberStrikeAI
Stars
8,323
Licence
Apache-2.0
Files
1 file

What it does

This is a reference card that tells an AI agent which post-exploitation techniques and tools to reach for after it has already gained access to a machine during an authorized penetration test. It lists reverse shell and TTY tricks, Linux and Windows privilege escalation paths, lateral movement, tunnelling, persistence ideas, hash cracking modes and cryptographic attacks such as padding oracle and hash length extension. The file is written mostly as a quick-lookup list in Chinese with English tool names, so the agent gets a menu of known methods rather than step-by-step instructions.

Great for

  • Security professionals running authorized penetration tests or red team exercises who want a quick technique reference
  • Students practising on CTF labs or deliberately vulnerable machines such as Hack The Box or TryHackMe
  • Pentesters who already have written scope and want an agent to suggest next steps after initial access

Skip it if

  • Anyone targeting systems they do not own or have written permission to test, since the file is a ready-made attack menu and offers no authorization checks (illegal use risk)
  • Beginners hoping for a guided course, because it lists techniques and tool names without explaining how or why they work
  • Defenders looking for detection or hardening guidance, since the content only covers offensive methods

Try asking

  • “Given a shell on a Linux box, list the most likely privilege escalation paths to check first in a lab”
  • “Suggest hashcat modes and an attack order for cracking NTLM and Kerberoast hashes from my CTF challenge”
  • “Explain how a padding oracle attack works and which tool to use against this test CBC ciphertext”
  • “Which lateral movement options fit a Windows host where I already hold valid credentials in my authorized lab”
Step-by-step guide: how to use Post-Exploitation and Cracking PlaybookInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    post-exploitation.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip post-exploitation.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip post-exploitation.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use it inside a written scope with explicit authorization, and keep an audit log of every action taken
  • Pair it with the referenced pentest-output-standards skill so persistence and changes are recorded and can be rolled back
  • Ask the agent to explain each suggested technique and confirm the target before running any command

What's inside

  • SKILL.md

Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.