Agent skill · security · sickn33
red-team-tools
Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces.
Why this skill is useful
Adds executable scripts for reconnaissance and vulnerability discovery that automate common tasks and enhance attack surface coverage.
What it needs
Requires go, python, ruby installed locally. Requires censys, shodan account access. About 5k tokens when loaded. Last updated 2026-08-07. 44,571 stars on the source repository.
What this skill does
⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited. Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target: 1. Ask the user to state the exact target URL, IP, account, or resource. 2. Ask the user to confirm written authorization and the permitted scope. 3. Show the exact command(s) and explain their expected effect. 4. Wait for explicit confirmation in the current conversation. Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab. AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments. Red Team Tools and Methodology Purpose Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces. Inputs/Prerequisites Target scope definition (domains, IP ranges, applications) Linux-based attack machine (Kali, Ubuntu) Bug bounty program rules and scope Tool dependencies installed (Go, Python, Ruby) API keys for various services (Shodan, Censys, etc.) Outputs/Deliverables Comprehensive subdomain enumeration Live host discovery and technology fingerprinting Identified vulnerabilities and attack vectors Automated recon pipeline outputs Documented findings for reporting Core Workflow 1. Project Tracking and Acquisitions Set up reconnaissance tracking: 2. Subdomain Enumeration Comprehensive subdomain discovery: 3. Live Host Discovery Identify responding hosts: 4. Technology Fingerprinting Identify technologies for targeted attacks: 5. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sickn33/red-team-tools