Agent skill · security · aradotso
awesome-pentest-tools-catalog
Curated penetration testing and red team tools collection organized by penetration testing lifecycle and MITRE ATT&CK framework
Why this skill is useful
Provides a curated list of niche penetration testing tools and specific command examples that the AI wouldn't reliably generate on its own.
What it needs
Requires dirsearch, ehole, feroxbuster, ffuf, fscan, masscan, naabu, netspy, nmap, nuclei, openvas, rustscan, semgrep, tidefinger, vscan, webanalyze, whatweb, xray installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Awesome Pentest Tools Catalog Skill by ara.so — Security Skills collection. This skill provides expert knowledge of the Awesome Pentest Tools catalog, a comprehensive collection of penetration testing and red team tools organized by the penetration testing lifecycle and MITRE ATT&CK framework. Use this to discover, recommend, and implement security testing tools across all phases of penetration testing. Overview The catalog organizes tools into these primary phases: 1. Information Gathering (信息收集) - Asset and target reconnaissance 2. Vulnerability Analysis (漏洞分析) - Host and web vulnerability scanning 3. Exploitation (漏洞利用) - Exploit frameworks and service-specific tools 4. Privilege Escalation (权限提升) - Linux, Windows, and container escape 5. Persistence (权限维持与后门) - C2 frameworks, webshells, and evasion 6. Tunneling & Proxying (隧道代理) - Network pivoting and protocol tunneling 7. Post-Exploitation (后渗透与域) - Credential theft and lateral movement 8. Covering Tracks (痕迹清理) - Log cleanup and anti-forensics Key Tool Categories Information Gathering Network & Port Scanning Fingerprinting & Technology Detection Directory & Parameter Discovery Vulnerability Scanning Quick Network Scanning Comprehensive Vulnerability Assessment Code Auditing Exploitation Framework Tools Service-Specific Tools Privilege Escalation Linux Privilege Escalation Windows Privilege Escalation Post-Exploitation & C2 Command & Control Frameworks WebShell Management Tunneling & Proxying Modern Tunneling Tools Protocol-Specific Tunnels Domain & Lateral Movement Common Workflows External Pentest Workflow Internal Network Pentest Configuration Examples Nuclei Templates Configuration Proxychains Configuration Best Practices Tool Selection Guide Safety & Legality Troubleshooting Tool Installation Issues Network/Proxy Issues Rate Limiting & Detection Additional Resources Official Documentation: Review individual tool repositories for detailed docs Community: Many tools have Discord/Slack channels for support Up …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/awesome-pentest-tools-catalog