Agent skill · security · davila7
Ethical Hacking Methodology
This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct security scanning", "exploit vulnerabilities", or "write penetration test reports". It provides comprehensive ethical hacking methodology and techniques.
Why this skill is useful
Adds detailed executable scripts for reconnaissance and scanning that enhance penetration testing capabilities.
What it needs
Requires kali-linux installed locally. About 6k tokens when loaded. Last updated 2026-08-06. 30,138 stars on the source repository.
What this skill does
Ethical Hacking Methodology Purpose Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology, essential tools, attack techniques, and professional reporting for authorized security assessments. Prerequisites Required Environment Kali Linux installed (persistent or live) Network access to authorized targets Written authorization from system owner Required Knowledge Basic networking concepts Linux command-line proficiency Understanding of web technologies Familiarity with security concepts Outputs and Deliverables 1. Reconnaissance Report - Target information gathered 2. Vulnerability Assessment - Identified weaknesses 3. Exploitation Evidence - Proof of concept attacks 4. Final Report - Executive and technical findings Core Workflow Phase 1: Understanding Hacker Types Classification of security professionals: White Hat Hackers (Ethical Hackers) Authorized security professionals Conduct penetration testing with permission Goal: Identify and fix vulnerabilities Also known as: penetration testers, security consultants Black Hat Hackers (Malicious) Unauthorized system intrusions Motivated by profit, revenge, or notoriety Goal: Steal data, cause damage Also known as: crackers, criminal hackers Grey Hat Hackers (Hybrid) May cross ethical boundaries Not malicious but may break rules Often disclose vulnerabilities publicly Mixed motivations Other Classifications Script Kiddies: Use pre-made tools without understanding Hacktivists: Politically or socially motivated Nation State: Government-sponsored operatives Coders: Develop tools and exploits Phase 2: Reconnaissance Gather information without direct system interaction: Passive Reconnaissance Google Hacking (OSINT) Google Hacking Database Categories: Files containing passwords Sensitive directories Web server detection Vulnerable servers Error messages Login portals Social Media Reconnaissance LinkedIn: Organizational charts, tec …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills davila7/ethical-hacking-methodology