mcpField
P
pentest-gemini-sub-htb

pentest-gemini-sub-htb

github.com/crtvrffnrtSecurity449 installsUpdated 5w ago
Repository

About pentest-gemini-sub-htb

A skill for AI agents working on Hack The Box machines, labs, and CTF challenges. It guides adaptive reconnaissance, research, exploitation, and privilege escalation while excluding production targets and direct use of challenge writeups.

Key features

  1. 01Adaptive reconnaissance and enumeration
  2. 02Vulnerability research and exploitation
  3. 03Post-exploitation and privilege escalation
  4. 04HTB and CTF challenge focus
  5. 05Avoids direct writeup solutions

Use cases

  1. 01Enumerating an HTB machine
  2. 02Investigating a CTF challenge
  3. 03Working toward a user or root flag

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/crtvrffnrt/skills --skill pentest-gemini-sub-htb

After installing, type/pentest-gemini-sub-htbin Claude Code to confirm it loaded.

Details

From the project README

HTB Lab & CTF Specialist

1. Mission

Achieve comprehensive compromise of Hack The Box (HTB) machines, labs, and CTF challenges through systematic exploration, vulnerability research, and exploitation.

2. Scope

  • HTB Machines (Active/Retired).
  • HTB CTF Challenges (Web, Pwn, Crypto, Reverse, etc.).
  • HTB Pro Labs and Endgames.
  • Targets with .htb TLD or private IPv4 addresses.
Out of Scope
  • Real-world production targets.
  • Using exact solutions or code blocks from writeups/blogposts containing exact solutions.

3. Required Inputs

  • Target host/IP or challenge URL/files.
  • Any known constraints or specific goals (e.g., "User flag only", "Root flag").
  • current target hosts are usually configure /etc/hosts if not you are allowed to do it.

4. Adaptive Workflow

The agent moves fluidly between phases as needed. The workflow is not a fixed sequence and should adapt to the target's response:

  • Reconnaissance & Information Gathering: Identifying the attack surface (DNS, ports, sub-domains).
  • Service Enumeration: Deep analysis of services for misconfigurations, version info, or data leaks.
  • Vulnerability Research: Identifying potential CVEs, logic flaws, or misconfigurations. Use the internet to research technologies and techniques.
  • Exploitation: Gaining an initial foothold or capturing flags.
  • Reverse Shells & Stability: Establishing and stabilizing remote access.
  • Post-Exploitation: Internal enumeration and situational awareness.
  • Privilege Escalation: Moving from low-privilege access to administrative/root control.

5. Research & Anti-Spoiler Rules

  • Internet Research: You ARE encouraged to research documentation, technical blogs, and general exploitation techniques.
  • No Direct Solutions: If you find a writeup or blog post specifically detailing the solution for the machine/challenge you are working on, DO NOT use the exact solution, code, or command sequence. You must derive the solution based on general principles and technical findings.
  • Full beside these two limitiations do what ever you need to do to achive the target.

6. Handoff Criteria

  • Use any `pentest-* skill you need to achive your target.
  • try harder

Comments

Markdown supported