# Pt Post Exploitation

> Performs authorized post-exploitation activities to assess impact, lateral movement paths, credential exposure, and detection gaps after initial compromise. Use when a foothold has been validated and the test requires controlled impact expansion analysis.

- **Type:** Skill
- **Install:** `agentstack add skill-santosomar-ethical-hacking-agent-skills-pt-post-exploitation`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [santosomar](https://agentstack.voostack.com/s/santosomar)
- **Installs:** 0
- **Category:** [Security](https://agentstack.voostack.com/c/security)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [santosomar](https://github.com/santosomar)
- **Source:** https://github.com/santosomar/ethical-hacking-agent-skills/tree/main/skills/pt-post-exploitation

## Install

```sh
agentstack add skill-santosomar-ethical-hacking-agent-skills-pt-post-exploitation
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Post-Exploitation

## Authorized Use Only

Run post-exploitation tasks only after explicit approval for this phase. Keep actions controlled, reversible, and auditable. Avoid destructive changes and unnecessary access to sensitive data.

## Objectives

1. Measure realistic impact after initial access.
2. Evaluate privilege escalation and lateral movement opportunities.
3. Identify credential and data exposure paths.
4. Assess logging, detection, and response effectiveness.

## Workflow

1. Confirm phase boundaries:
   - Allowed techniques, prohibited actions, and stop conditions
   - Approved systems, accounts, and time windows
2. Stabilize foothold context:
   - Document current privileges and reachable assets
   - Capture baseline telemetry and controls in place
3. Conduct controlled post-exploitation checks:
   - Privilege escalation feasibility
   - Credential access and reuse opportunities
   - Lateral movement paths through trust relationships
   - Data access paths tied to business impact
4. Evaluate defense visibility:
   - Which actions generated alerts
   - How quickly detection and containment occurred
5. Cleanup and rollback:
   - Remove all artifacts created during testing
   - Verify environment returns to expected state

## Output Template

```markdown
# Post-Exploitation Output

## Initial Context
- Entry point:
- Starting privilege:
- Scope constraints:

## Escalation and Movement Findings
- Finding:
  - Preconditions:
  - Evidence:
  - Result:
  - Impact:

## Credential and Data Exposure
- Exposure path:
  - Affected assets/data:
  - Business risk:

## Detection and Response
- Alerts observed:
- Time to detect:
- Time to contain:
- Gaps:

## Cleanup Verification
- Artifacts removed:
- Validation notes:
```

## Quality Checks

- Every action is within approved boundaries.
- Evidence supports reproducibility without sensitive data leakage.
- Findings map clearly from technical path to business consequence.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [santosomar](https://github.com/santosomar)
- **Source:** [santosomar/ethical-hacking-agent-skills](https://github.com/santosomar/ethical-hacking-agent-skills)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-santosomar-ethical-hacking-agent-skills-pt-post-exploitation
- Seller: https://agentstack.voostack.com/s/santosomar
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.