Individual skill
infrastructure
Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.
skills/infrastructure/SKILL.md
Source commit 95fdc128af4ca1ae16b3226f9430f1bad97b0656
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Not checked yet
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 610
- Repository last updated
- Jul 29, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- bounty-hunters Repository topic
- hackerone Repository topic
- pentest Repository topic
- pentest-tool Repository topic
- security Repository topic
- security-research Repository topic
- security-tools Repository topic
- devops Derived category
- testing Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 3,069 bytesreference/ccsds-space-telecommand-quickstart.mddoc · 6,382 bytesreference/dns-quickstart.mddoc · 2,863 bytesreference/dos-quickstart.mddoc · 890 bytesreference/firewall-detection.mddoc · 1,692 bytesreference/hardware-embedded-quickstart.mddoc · 6,603 bytesreference/icmp-scan.mddoc · 1,462 bytesreference/ics-modbus-quickstart.mddoc · 4,231 bytesreference/ics-protocols.mddoc · 5,263 bytesreference/ip-reputation.mddoc · 1,675 bytesreference/ipv6-quickstart.mddoc · 812 bytesreference/mitm-quickstart.mddoc · 929 bytesreference/os-fingerprint.mddoc · 1,500 bytesreference/overview.mddoc · 2,591 bytesreference/port-scanning-quickstart.mddoc · 937 bytesreference/scenarios/dns/bind-tsig-key-hijack.mddoc · 3,451 bytesreference/scenarios/dns/dns-cache-poisoning.mddoc · 4,860 bytesreference/scenarios/dns/dns-rebinding.mddoc · 5,039 bytesreference/scenarios/dns/subdomain-enumeration.mddoc · 5,322 bytesreference/scenarios/dns/zone-transfer.mddoc · 3,545 bytesreference/scenarios/hardware/jtag-uart.mddoc · 6,942 bytesreference/scenarios/ics/ethernet-ip.mddoc · 6,363 bytesreference/scenarios/ics/modbus.mddoc · 7,352 bytesreference/scenarios/ics/s7comm.mddoc · 5,077 bytesreference/scenarios/ipv6/ipv6-recon.mddoc · 5,495 bytesreference/scenarios/ipv6/slaac-attack.mddoc · 4,759 bytesreference/scenarios/mitm/arp-poisoning.mddoc · 4,639 bytesreference/scenarios/mitm/lldp-cdp-spoofing.mddoc · 5,254 bytesreference/scenarios/mitm/ssl-stripping.mddoc · 5,097 bytesreference/scenarios/network-recon/alive-hosts-discovery.mddoc · 4,679 bytesreference/scenarios/network-recon/cups-browsed-rce.mddoc · 4,587 bytesreference/scenarios/network-recon/port-scanning-tcp-udp.mddoc · 7,634 bytesreference/scenarios/network-recon/service-fingerprinting.mddoc · 5,420 bytesreference/scenarios/smb/ntlm-relay-coercion.mddoc · 7,878 bytesreference/scenarios/smb/null-and-guest-enumeration.mddoc · 4,836 bytesreference/scenarios/smb/share-spidering.mddoc · 5,959 bytesreference/scenarios/smb/smb-signing-misconfig.mddoc · 5,672 bytesreference/scenarios/sniffing/credentials-from-pcap.mddoc · 6,324 bytesreference/scenarios/sniffing/promiscuous-capture.mddoc · 5,594 bytesreference/scenarios/vlan-hopping/double-tagging.mddoc · 4,562 bytesreference/scenarios/vlan-hopping/dtp-spoofing.mddoc · 5,161 bytesreference/service-enum.mddoc · 6,697 bytesreference/smb-netbios-quickstart.mddoc · 6,263 bytesreference/sniffing-quickstart.mddoc · 944 bytesreference/syn-scan.mddoc · 1,534 bytesreference/udp-scan.mddoc · 1,513 bytesreference/upnp-iot-quickstart.mddoc · 5,118 bytesreference/vlan-hopping-quickstart.mddoc · 836 bytesreference/wifi-wpa-enterprise-quickstart.mddoc · 2,436 bytestools/zmtp_probe.pyruns · 4,686 bytes
Read excerpt
# Infrastructure
Test network infrastructure for vulnerabilities including network services, protocols, and perimeter security.
## Techniques
| Type | Key Vectors |
|------|-------------|
| **Port Scanning** | SYN scan, UDP scan, service detection, OS fingerprinting |
| **DNS** | Zone transfers, cache poisoning, subdomain takeover, DNS rebinding |
| **MITM** | ARP spoofing, DNS spoofing, SSL stripping, LLMNR/NBT-NS poisoning |
| **VLAN Hopping** | Switch spoofing, double tagging |
| **IPv6** | RA flooding, neighbor spoofing, tunneling attacks |
| **SMB/NetBIOS** | Null sessions, relay attacks, enumeration |