About pentest-network-internal
An internal network penetration-testing skill for security teams simulating an attacker. It covers host and service discovery, credential checks, Active Directory enumeration, and lateral movement.
Key features
- 01Network and port discovery
- 02Service and version enumeration
- 03Known-vulnerability scanning
- 04Weak and default credential checks
- 05Active Directory mapping
- 06Lateral movement simulation
Use cases
- 01Mapping hosts and exposed services
- 02Checking internal services for known flaws
- 03Auditing weak or default credentials
- 04Tracing Active Directory paths to assets
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ jd-opensource/ joysafeter --skill pentest-network-internalAfter installing, type/pentest-network-internalin Claude Code to confirm it loaded.
Bundled filesreferences/tools.mdreferences/workflows.md
Details
From the project READMEPentest Network Internal
Purpose
Simulate an internal attacker to identify weak credentials, misconfigured services, and Active Directory paths to high-value assets.
Core Workflow
- Network Discovery: Map the internal network, live hosts, and open ports using
nmapandmasscan. - Service Enumeration: Identify running services, versions, and potential entry points (SMB, RDP, SSH, etc.).
- Vulnerability Scanning: Check for known service vulnerabilities (e.g., EternalBlue, ZeroLogon) using
nucleiandnmap-scripts. - Credential Auditing: Test weak passwords and default credentials using
hydraandnetexec(CrackMapExec). - Active Directory Enum: Map AD trust relationships, users, and groups using
bloodhoundandldapdomaindump. - Lateral Movement: Simulate movement between hosts using valid credentials or exploits.
References
references/tools.mdreferences/workflows.md
Comments
Markdown supported