Agent skill · security · aiskillstore
pentest-commands
This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references.
Why this skill is useful
Adds a comprehensive set of executable commands for penetration testing tools that enhance the AI's capabilities in security assessments.
What it needs
Requires kali-linux installed locally. About 5k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Pentest Commands Purpose Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments. Inputs/Prerequisites Kali Linux or penetration testing distribution Target IP addresses with authorization Wordlists for brute forcing Network access to target systems Basic understanding of tool syntax Outputs/Deliverables Network enumeration results Identified vulnerabilities Exploitation payloads Cracked credentials Web vulnerability findings Core Workflow 1. Nmap Commands Host Discovery: Port Scanning: Service Detection: NSE Scripts: Advanced Scans: 2. Metasploit Commands Basic Usage: Common Exploits: Scanners: Handler Setup: Payload Generation (msfvenom): 3. Nikto Commands 4. SQLMap Commands 5. Hydra Commands 6. John the Ripper Commands 7. Aircrack-ng Commands 8. Wireshark/Tshark Commands Quick Reference Common Port Scans Password Hash Types Mode Type ------ ------ 0 MD5 100 SHA1 1000 NTLM 1800 sha512crypt 3200 bcrypt 13100 Kerberoast Constraints Always have written authorization Some scans are noisy and detectable Brute forcing may lock accounts Rate limiting affects tools Examples Example 1: Quick Vulnerability Scan Example 2: Web App Test Troubleshooting Issue Solution ------- ---------- Scan too slow Increase timing (-T4, -T5) Ports filtered Try different scan types Exploit fails Check target version compatibility Passwords not cracking Try larger wordlists, rules
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/pentest-commands