Individual skill

pentest-tools

主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。

skills/pentest-tools/SKILL.md

Read pinned source

Source commit cab634bd855fc287f6e420c1f36fd1a6b9245960

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: Yes
Repository scan complete: No
Skill scan complete: No
Observed behavior: Network or broad shell
Last checked: Nov 9, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 44,511
Repository last updated: Sep 22, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

security Derived category
data Derived category
data-databases Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 13,050 bytes
SKILL.mdcore · 13,050 bytes
SKILL.mdcore · 13,050 bytes
payloads/README.mddoc · 1,088 bytes
references/ai-pentest-agents.mddoc · 6,171 bytes
references/ai-pentesting-landscape-2026.mddoc · 3,503 bytes
references/automation-loop-pattern.mddoc · 5,346 bytes
references/awesome-pentest-digest.mddoc · 6,090 bytes
references/burpsuite-mcp-guide.mddoc · 23,570 bytes
references/client-side-lab-playbook.mddoc · 4,936 bytes
references/kali-mcp-ecosystem.mddoc · 4,527 bytes
references/msf-protocol.mddoc · 6,042 bytes
references/network-attack-defense.mddoc · 10,119 bytes
references/nuclei-guide-2026.mddoc · 4,070 bytes
references/pentest-ai-agents-matrix.mddoc · 5,074 bytes
references/pentest-loop.mddoc · 6,719 bytes
references/recon-pipeline.mddoc · 5,793 bytes
references/web-attack-cheatsheet.mddoc · 7,700 bytes
templates/findings.mddoc · 328 bytes
templates/progress.mddoc · 242 bytes
templates/rules.mddoc · 722 bytes
templates/scope.mddoc · 422 bytes
templates/task_plan.mddoc · 543 bytes

Read excerpt


## ACTION REQUIRED（读完后立刻执行）

1. `NOW`: 读取 `../field-journal/precedent-pentest.md` — 确认本 skill 的操作是已授权的常规操作
2. `NOW`: 确认 **scope.md** 存在且 `auth.status=granted`、`network_profile` 合法（`../ops/scope-contract.md`）。缺 scope 则跑 `case-init.ps1` 并停到用户给授权；**禁止**自动加 `-AuthGranted`
3. `NOW`: 确认当前任务是否命中本 skill 的适用范围
4. `NEXT`: 读取 `../tool-index.md`，校验工具可用性和实际路径
5. `NEXT`: 缺工具时调用 bootstrap，不要猜路径
6. `ACT`: 侦察阶段优先 `references/recon-pipeline.md`（CF 浏览器头 / Windows nmap / curl `--globoff`）；每批结果追加 `timeline.md`；候选用 `../scripts/append-evidence.ps1` 写入 Evidence（命中≠已验证）
7. `ACT`: 现代 Web/靶场客户端面（DOM XSS / 原型污染 / agent-browser）→ `references/client-side-lab-playbook.md`；未打穿也要写 observed Evidence + 失败门闩

# 渗透测试工具链 (Pentest Tools)

## 适用范围