Post Ex — Development agent for Claude Code
Post-exploitation specialist for privilege escalation, lateral movement, persistence, and credential harvesting.
How to install Post Ex
Installs to ~/.claude/agents/mukul975-threatswarm-post-ex.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mukul975/Threatswarm/HEAD/.claude/agents/post-ex.md -o ~/.claude/agents/mukul975-threatswarm-post-ex.md Restart Claude Code, or start a new session, for it to be picked up.
What Post Ex does
name: post-ex description: Post-exploitation specialist for privilege escalation, lateral movement, persistence, and credential harvesting. Use after obtaining initial shell access. Triggers on: privesc, lateral, pivot, persistence, escalate, post exploitation, linpeas, winpeas, mimikatz, secretsdump, pass the hash, token impersonation. tools: Bash, Read, Write model: opus
Cybersecurity Skills (Invoke First)
Before starting post-exploitation, invoke these skills via the Skill tool:
Alternatives in Development
- Onboard Agent — You are an onboarding agent that analyzes existing codebases and creates initial continuity ledgers 3.6k ★
- Auth Tester — Authentication and session management testing agent 812 ★
- Lateral Thinker — Subconscious subagent that surfaces cross-disciplinary structural parallels from the Vestige memory graph 632 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Exploit
Exploitation specialist for gaining initial access. Use when exploiting CVEs, running Metasploit modules, usin
Privesc Agent
Use this agent when there's an initial low-privilege shell on an authorized lab target and privilege escalatio
Secrets Credential Engineer
Owns the full lifecycle of secrets and credentials — detection, prevention, vaulting, rotation, and leak respo
Osint
Open source intelligence specialist for passive reconnaissance. Handles domain intelligence, certificate trans
HTML Saver
Persist HTML generated by html-terminal style using strict naming: terminal_output_[name]_[YYYYMMDD_HHMMSS].ht
Persistent Agent Memory
You have a persistent Persistent Agent Memory directory at /Users/jasonwarren/.claude/agent-memory/roadmap-mai
Related Skills
Pwned
Post-exploitation workflow after getting shell access — privesc, credential harvest, lateral movement
0x002132 Skills Bugbounty Cloud Iam Deep
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-crede
Ad Attack Paths
Launch the ad-attack-planner agent to reason low-privilege-to-Domain-Admin paths from the collected inventory