Skip to main content
affpapa.org
RU EN
skill CX Codex

linux-pentester-command-reference — Claude Code skill

A skill that hands your agent a Linux command reference split by pentest phase: recon, enumeration, exploitation, privesc.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add reason-machines/security-skills --skill linux-pentester-command-reference -a claude-code
Open on GitHub

What linux-pentester-command-reference does

The skill points the agent at a collection of Linux commands and techniques grouped by phase. It covers daily survival commands, local and network recon, service and user enumeration, getting an initial shell, escalating to root, and post-exploitation work. A cheatsheet section holds quick one-liners.

The material sits in modules: 00-General-Commands, 01-Recon, 02-Enumeration, 03-Exploitation, 04-Privilege-Escalation, 05-Post-Exploitation and Cheatsheets. Ask about a specific phase and the agent pulls the matching folder instead of guessing from memory. Triggers include hunting SUID binaries, enumerating services on a target, and network discovery.

Worth installing if you poke at Linux boxes in labs or CTFs. These commands act on a live system, and some of them write files or leave traces, so run them against your own target only. The repository clones locally, which means the reference stays usable outside the agent too.

What it helps with

  • hunt SUID binaries and judge which ones help with escalation
  • enumerate services and versions on a Linux target
  • gather local recon: processes, users, environment variables
  • catch a reverse shell and stabilize the terminal
  • check cron jobs and file permissions before escalating

Example prompts for the agent

  • Show me Linux enumeration commands for pentesting
  • How do I find SUID binaries for privilege escalation?
  • What commands do I use for network reconnaissance on Linux?

How to install linux-pentester-command-reference

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill linux-pentester-command-reference -a claude-code

2Manually: put the files in place

~/.claude/skills/linux-pentester-command-reference/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/linux-pentester-command-reference/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about linux-pentester-command-reference

How do I install linux-pentester-command-reference in Claude Code?

Run npx skills add reason-machines/security-skills --skill linux-pentester-command-reference -a claude-code. The skill lands at ~/.claude/skills/linux-pentester-command-reference/SKILL.md.

What does linux-pentester-command-reference do?

It gives the agent a Linux command reference organized by pentest phase: reconnaissance, enumeration, exploitation, privilege escalation and post-exploitation.

Does it need network access while I work?

The reference is cloned locally, so you can read the commands without the agent. Some techniques assume a network path between your machine and the target.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set24

malware-repository-warning The skill triggers when someone asks for help with a crack, keygen or pre-activated antivirus, and answers with a warning instead of setup steps. CX Codex +1 851installs edgesecurityaccess-wireguard-vpn This skill walks the agent through standing up a WireGuard VPN: build the Go server, add users, and hand out configs over an HTTP API. CX Codex +1 788installs sparkfinderoven-security-compliance-skills A suite of commands and workflows for security and compliance work: OWASP scanning, CVE detection, GDPR audits, SOC 2 readiness, threat modeling. CX Codex +1 759installs pentestify-security-report-generator A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export. CX Codex +1 747installs sparkfinderoven-r01-security-compliance-skills A skill suite that scans code for OWASP vulnerabilities, checks dependencies for CVEs, audits GDPR and SOC 2 readiness, and builds STRIDE threat models. CX Codex +1 729installs esaa-security-audit This skill runs 95 checks across 16 security domains and records every finding as an immutable event, so the same repo state yields the same report. CX Codex +1 717installs foundry-security-spec A skill that walks your agent through implementing Cisco's Foundry spec: a multi-role system for finding and validating vulnerabilities. Useful when you're building your own evaluation pipeline. CX Codex +1 683installs web-security-scanner-pro A skill that teaches your agent to drive Web Security Scanner Pro: 49 modules, WAF evasion, CMS checks and HTML or PDF reports. CX Codex +1 607installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor