Menu

Individual skill

kali-pentest-zh

0upvotes

通过 SSH 或 Docker 使用 Kali Linux CLI 工具执行授权渗透测试。 覆盖：信息收集、漏洞分析、嗅探与欺骗、Web/API 渗透、漏洞利用、密码攻击、无线、云原生安全、RFID/NFC、VoIP/ICS、逆向工程、取证分析、后渗透/C2、报告生成。

kali-pentest-zh/SKILL.md

Read pinned source

Source commit 43138c5eee3c30848f704301f834c2426940563d

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
No
Repository scan complete
No
Skill scan complete
No
Observed behavior
Not checked yet
Last checked
Nov 6, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
181
Repository last updated
Jun 25, 2026
License
Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Declared tags are partial or unavailable.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# Kali Pentest Skill

## 安全约束（首先阅读）

1. **授权是强制性前提**：未经用户确认的书面授权，不得扫描或探测任何目标。
2. **范围具有约束力**：仅测试用户已授权的主机、域名、端口、账号和技术手段。
3. **风险确认**：High/Critical 级别操作需用户明确批准后方可执行。
4. **禁止操作**：攻击未授权目标、对生产系统执行破坏性操作、未经明确要求修改/删除/加密目标文件、攻击关键基础设施。

高风险操作包括漏洞利用、凭据喷洒、暴力破解、NTLM 中继、钓鱼、无线攻击、持久化、数据外传、近似 DoS 的扫描和侵入式漏洞检查。

## 第一步：确定执行环境

检查用户消息中的连接信息。若未提供，向用户询问。