Agent skill · security · aiskillstore
ethical-hacking-methodology
Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology, essential tools, attack techniques, and professional reporting for authorized security assessments.
Why this skill is useful
Provides specific attack techniques and tools for penetration testing that the AI wouldn't reliably generate on its own.
What it needs
Requires kali-linux installed locally. About 6k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
AUTHORIZED USE ONLY: Use this skill only for authorized penetration testing engagements, defensive validation, or controlled educational environments. Ethical Hacking Methodology Purpose Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology, essential tools, attack techniques, and professional reporting for authorized security assessments. Prerequisites Required Environment Kali Linux installed (persistent or live) Network access to authorized targets Written authorization from system owner Required Knowledge Basic networking concepts Linux command-line proficiency Understanding of web technologies Familiarity with security concepts Outputs and Deliverables 1. Reconnaissance Report - Target information gathered 2. Vulnerability Assessment - Identified weaknesses 3. Exploitation Evidence - Proof of concept attacks 4. Final Report - Executive and technical findings Core Workflow Phase 1: Understanding Hacker Types Classification of security professionals: White Hat Hackers (Ethical Hackers) Authorized security professionals Conduct penetration testing with permission Goal: Identify and fix vulnerabilities Also known as: penetration testers, security consultants Black Hat Hackers (Malicious) Unauthorized system intrusions Motivated by profit, revenge, or notoriety Goal: Steal data, cause damage Also known as: crackers, criminal hackers Grey Hat Hackers (Hybrid) May cross ethical boundaries Not malicious but may break rules Often disclose vulnerabilities publicly Mixed motivations Other Classifications Script Kiddies: Use pre-made tools without understanding Hacktivists: Politically or socially motivated Nation State: Government-sponsored operatives Coders: Develop tools and exploits Phase 2: Reconnaissance Gather information without direct system interaction: Passive Reconnaissance Google Hacking (OSINT) Google Hacking Database Categories: Files containing passwords Sens …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/ethical-hacking-methodology