# linux-pentester-commands

A Linux command reference for reconnaissance, enumeration, exploitation, and privilege escalation during authorized penetration testing.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 319 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/linux-pentester-commands/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/linux-pentester-commands

## What it does

This skill groups Linux pentesting commands by workflow stage. The sections cover basic system work, local and network reconnaissance, user and service enumeration, exploitation, privilege escalation, post-exploitation, and quick-reference one-liners. Examples cover system details, network connections, SUID files, cron jobs, and sudo checks.

Use it when an agent needs to choose commands for inspecting a Linux host or explain a local enumeration sequence. The skill is available for Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, and OpenCode. Its reference includes reverse-shell and root-access examples, so use those parts only on systems you are authorized to test.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill linux-pentester-commands -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/linux-pentester-commands/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/linux-pentester-commands/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill linux-pentester-commands -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/linux-pentester-commands/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill linux-pentester-commands -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/linux-pentester-commands/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills linux-pentester-commands
```

2. **Manually: put the files in place**
- File: `.github/skills/linux-pentester-commands/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill linux-pentester-commands -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/linux-pentester-commands
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/linux-pentester-commands/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill linux-pentester-commands -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/linux-pentester-commands/SKILL.md

## When to use it
- inspect a Linux host and identify the current user context
- map interfaces, routes, and listening network services
- enumerate users, processes, services, and readable files
- check SUID files, cron jobs, and sudo permissions
- plan post-exploitation checks on an authorized system

## Example prompts
- Run an authorized Linux reconnaissance pass and organize commands for kernel, user, and network checks.
- Explain a step-by-step service and SUID enumeration plan for this Linux host, including what each command reveals.
- Create a permission-escalation review covering `sudo`, cron jobs, and writable files.

## Similar
- [debian-linux-triage](https://affpapa.org/en/nevibecode/skills/debian-linux-triage.md) — skill · 9197 installs
- [fedora-linux-triage](https://affpapa.org/en/nevibecode/skills/fedora-linux-triage.md) — skill · 8800 installs
- [linux-lateral-movement](https://affpapa.org/en/nevibecode/skills/linux-lateral-movement.md) — skill · 3600 installs
- [linux-hardening](https://affpapa.org/en/nevibecode/skills/linux-hardening.md) — skill · 769 installs
- [littlesnitch-linux](https://affpapa.org/en/nevibecode/skills/littlesnitch-linux.md) — skill · 518 installs
- [analyzing-linux-elf-malware](https://affpapa.org/en/nevibecode/skills/analyzing-linux-elf-malware.md) — skill · 457 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 42 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md