Agent skill · security · aiskillstore
pentest-metasploit
Penetration testing framework for exploit development, vulnerability validation, and authorized security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in authorized security assessments, (2) Demonstrating exploit impact for security research, (3) Testing defensive controls in controlled environments, (4) Conducting authorized penetration tests with proper scoping and authorization, (5) Developing post-exploitation workflows for red team operations.
Why this skill is useful
Adds structured workflows and executable commands for Metasploit that enhance penetration testing capabilities.
What it needs
Requires metasploit-framework, nmap, postgresql installed locally. About 7k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Metasploit Framework Penetration Testing Overview Metasploit Framework is the industry-standard platform for penetration testing, vulnerability validation, and exploit development. This skill provides structured workflows for authorized offensive security operations including exploitation, post-exploitation, and payload delivery. IMPORTANT: This skill is for AUTHORIZED security testing only. Always ensure proper authorization, scoping documents, and legal compliance before conducting penetration testing activities. Quick Start Initialize Metasploit console and verify database connectivity: Core Workflow Penetration Testing Workflow Progress: [ ] 1. Verify authorization and scope [ ] 2. Configure workspace and target enumeration [ ] 3. Identify and select appropriate exploits [ ] 4. Configure payload and exploit options [ ] 5. Execute exploitation with proper documentation [ ] 6. Conduct post-exploitation activities (if authorized) [ ] 7. Document findings with impact assessment [ ] 8. Clean up artifacts and sessions Work through each step systematically. Check off completed items. 1. Authorization Verification CRITICAL: Before any testing activities: Confirm written authorization from asset owner Review scope document for in-scope targets Verify IP ranges and systems authorized for testing Confirm allowed testing windows and blackout periods Document point of contact for emergency escalation 2. Workspace Setup Create isolated workspace for engagement: Import existing reconnaissance data: 3. Exploit Selection Search for relevant exploits based on enumerated services: Evaluate exploit suitability: Reliability Ranking: Excellent > Great > Good > Normal > Average Stability: Check crash potential Target Compatibility: Verify OS version and architecture Required Credentials: Determine if authentication needed 4. Exploit Configuration Configure selected exploit module: 5. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/pentest-metasploit