mcpField
P
penetration-testing

penetration-testing

github.com/bagelholeSecurity1.2k378 installsUpdated 23w ago
Repository

About penetration-testing

penetration-testing is a skill for validating security controls through authorized testing. It guides security testers through reconnaissance, scanning, and web testing, while emphasizing written authorization, scope, and documentation.

Key features

  1. 01Cover reconnaissance and network mapping
  2. 02Provide port and web scanning examples
  3. 03Address SQL injection and XSS testing
  4. 04Emphasize authorization, scope, and documentation

Use cases

  1. 01Enumerate target domains and subdomains
  2. 02Scan ports and web services within an authorized scope
  3. 03Test for common web vulnerabilities within scope
  4. 04Document findings and report critical issues promptly

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/bagelhole/devops-security-agent-skills --skill penetration-testing

After installing, type/penetration-testingin Claude Code to confirm it loaded.

Details

From the project README

Penetration Testing

Validate security controls through authorized testing.

Phases

pentest_phases:
  1_reconnaissance:
    - Passive information gathering
    - DNS enumeration
    - Network mapping
    
  2_scanning:
    - Port scanning
    - Service identification
    - Vulnerability scanning
    
  3_exploitation:
    - Attempt exploitation
    - Verify vulnerabilities
    - Document findings
    
  4_post_exploitation:
    - Privilege escalation
    - Lateral movement
    - Data access
    
  5_reporting:
    - Document findings
    - Risk assessment
    - Remediation recommendations

Reconnaissance

# DNS enumeration
dig example.com ANY
host -l example.com

# Subdomain discovery
subfinder -d example.com

# WHOIS
whois example.com

Scanning

# Port scan
nmap -sV -sC -p- target.com

# Web scanning
nikto -h https://target.com
dirb https://target.com

# Vulnerability scan
nmap --script vuln target.com

Web Testing

# SQL injection test
sqlmap -u "http://target.com/page?id=1"

# XSS testing
# Use Burp Suite or manual testing

# Directory traversal
curl "http://target.com/file?path=../../../etc/passwd"

Rules of Engagement

scope:
  in_scope:
    - target.com
    - api.target.com
  out_of_scope:
    - production-db.target.com
    - third-party services
  
  testing_window: "Weekdays 2-6 AM UTC"
  emergency_contact: "[email protected]"

Best Practices

  • Always get written authorization
  • Define clear scope
  • Document everything
  • Report critical findings immediately
  • Safe exploitation techniques only

Related Skills

Comments

Markdown supported