Can this skill be used for defensive security purposes?

Yes, it includes a dedicated 'Persistence Detection' section with commands to help security auditors identify and remove unauthorized persistence mechanisms.

Which operating systems are supported by this persistence skill?

The skill provides comprehensive techniques for Windows (Registry, WMI, Services), Linux (Cron, Systemd, SSH), and container environments like Docker and Kubernetes.

Are rootkits covered in these techniques?

The skill includes high-level guidance on both user-mode and kernel-mode rootkits, including Loadable Kernel Modules (LKM) for Linux.

Does it include cloud-specific persistence methods?

Yes, it covers IAM user creation and policy attachment for AWS, as well as Service Principal and Identity management for Azure environments.

What types of web shells are included in the documentation?

The skill provides implementation patterns for PHP, ASP/ASPX, and JSP web shells, including common upload locations and obfuscation tips.

Establishing Persistence Techniques

Name: Establishing Persistence Techniques
Author: trilwu

bytrilwu

0•

Security & Testing

Implements and detects various methods for maintaining long-term access to compromised Windows, Linux, and cloud environments during security engagements.

This skill equips Claude Code with a comprehensive library of persistence techniques used in red team operations and penetration testing. It provides expert-level guidance on establishing reliable backdoors via registry keys, scheduled tasks, systemd services, SSH keys, and cloud-specific persistence in AWS and Azure. Designed for security professionals, the skill covers cross-platform methodologies from user-mode techniques to kernel-mode rootkits, while also providing crucial detection patterns to help audit and secure infrastructure against unauthorized access.

Key Features

01Cloud-native persistence strategies for AWS IAM and Azure Service Principals

020 GitHub stars

03Detection and remediation commands to audit and clear persistence mechanisms

04Detailed registry, scheduled task, and service manipulation for Windows environments

05Cron job, systemd, and SSH key persistence implementations for Linux systems

06Cross-platform persistence patterns for Windows, Linux, and containerized environments

Use Cases

01Security testing to validate Endpoint Detection and Response (EDR) effectiveness

02Red team operations requiring stealthy, long-term access to target systems

03Post-exploitation research and backdoor analysis for security audits

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add trilwu/secskills persistence-techniques

For use in Claude.ai and ChatGPT

Download Skill