fix: add metadata to sftp command in ssh_example.yml

[DC925928496]

Problem

The sftp command in examples/ssh_example.yml (line ~77) was the only command in the playbook missing a metadata block. All other commands in the playbook have MITRE ATT&CK mappings, and this inconsistency could cause issues for users/tools that rely on metadata.

Related issue: #232

Fix

Added metadata to the sftp command that uploads linpeas.sh:

# Before:
  - type: sftp
    cmd: put
    local_path: $LINPEAS
    remote_path: /tmp/linpeas.sh
    session: "foothold"
    mode: "777"

# After:
  - type: sftp
    cmd: put
    local_path: $LINPEAS
    remote_path: /tmp/linpeas.sh
    session: "foothold"
    mode: "777"
    metadata:
      description: "Upload linpeas.sh to target via SFTP for privilege escalation enumeration"
      techniques: "T1105"
      tactics: "Execution"

MITRE ATT&CK mapping

• T1105 (Ingress Tool Transfer) — the sftp command transfers linpeas.sh to the target system
• Execution tactic — the transferred tool is executed in subsequent steps

Related Issues

Fixes #232

[whotwagner]

I would prefer to keep /usr/share. Not only because in our attackbed we download seclists with an ansible role to that directory, but also because this path is available on many distributions and not only on distributions that support snap

[whotwagner]

Suggested change

	PASSWDLIST: /usr/share/seclists/Passwords/darkweb2017-top1000.txt