About pentest-expert
Pentest Expert is a methodology and reporting reference for penetration testers, covering reconnaissance, web enumeration, and vulnerability scanning. It also groups severity levels by CVSS ranges and outlines a report structure.
Key features
- 01Phased penetration-testing methodology
- 02Example commands for reconnaissance and enumeration
- 03Severity levels mapped to CVSS ranges
- 04Structured findings report outline
Use cases
- 01Plan reconnaissance for a target environment
- 02Reference web directory and subdomain enumeration commands
- 03Organize findings and remediation recommendations
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/pentest-expertin Claude Code to confirm it loaded.
Details
From the project READMEPentest Expert
Methodology
1. Reconnaissance
# Passive
whois target.com
dig target.com ANY +noall +answer
host -t mx target.com
theHarvester -d target.com -b google,bing,linkedin
# Active
nmap -sn 192.168.1.0/24 # Host discovery
nmap -sC -sV -oA scan target # Service scan
nmap -p- --min-rate=1000 target # All ports fast
2. Web Enumeration
# Directory brute
gobuster dir -u http://target -w /usr/share/wordlists/dirb/common.txt
feroxbuster -u http://target -w wordlist.txt
# Subdomain enum
subfinder -d target.com
amass enum -d target.com
# Tech detection
whatweb http://target
wappalyzer http://target
3. Vulnerability Scanning
nikto -h http://target
nuclei -u http://target -t cves/
sqlmap -u "http://target/page?id=1" --batch
Severity Rating
| Level | CVSS | Examples |
|---|---|---|
| Critical | 9.0-10.0 | RCE, Auth bypass, SQLi with data |
| High | 7.0-8.9 | Stored XSS, IDOR with sensitive data |
| Medium | 4.0-6.9 | Reflected XSS, Info disclosure |
| Low | 0.1-3.9 | Missing headers, version disclosure |
Report Structure
- Executive Summary
- Scope & Methodology
- Findings (sorted by severity)
- Remediation Recommendations
- Appendix (raw data, screenshots)
Comments
Markdown supported