Search: "penetration testing"
Showing 24 of 24 results
penetration-testing
# Penetration Testing ## Table of Contents - [Overview](#overview) - [When to Use](#when-to-use) - [Quick Start](#quick-start) - [Reference Guides](#reference-guides) - [Best Practices](#best-practices) ## Overview Systematic security testing to identify, exploit, and document vulnerabilities in applications, networks, and infrastructure through simulated attacks. ## When to Use - Pre-production security validation - Annual security assessments - Compliance requirements (PCI-DSS, ISO 27001) - Post-incident
Pilot Penetration Testing Setup
Deploy an automated penetration testing pipeline with 4 agents. Use this skill when: 1. User wants to set up a penetration testing or security assessment pip...
penetration-testing-with-strix
# Run a Strix pentest Strix runs autonomous AI pentesting agents that dynamically exploit a target and only report findings validated with a working proof-of-concept. There are **two ways to run it, built on the same engine and producing the same findings** ā pick per situation, and mix them freely: - **Open-source CLI** (self-hosted) ā runs on your machine in a Docker sandbox with your own LLM key. Free, fully local, BYO-LLM, air-gap capable. Docs: [docs.strix.ai](https://docs.strix.ai). - **Managed cloud*
web-app-penetration-testing
# Pentest a web application Black-box (and optionally source-assisted) penetration testing of a running web app with Strix's autonomous agents. Every reported finding is validated with a working exploit, so there are no signature-based false positives to triage. Install, LLM setup, all CLI flags, and the managed-cloud alternative are covered in the **penetration-testing-with-strix** skill ā read it if the target is not a running web app, or if `strix --version` fails. For a run with no Docker and no LLM key
ssh-penetration-testing
This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabi...
Awesome Pentest
Browse curated penetration testing resources and exploit databases. Use when planning security audits, researching vulns, or building toolkits.
Pentest Commands
Essential penetration testing command reference. Quick lookup for nmap, Metasploit, hydra, john, nikto, gobuster, and other offensive security tools. Covers...
MUKI Asset Fingerprinting
MUKI asset fingerprinting tool for red team reconnaissance. Use when performing authorized penetration testing, asset discovery, service fingerprinting, vuln...
Hexstrike
Cybersecurity assistant for CTF challenges, penetration testing, network recon, vulnerability assessment, and security research. Use when: (1) solving CTF ch...
SĀ³ Pentest Commands
This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "s...
Code Security Auditor
Comprehensive code security audit with AI-powered vulnerability detection. Covers OWASP Top 10, dependency scanning, secret detection, SAST, and provides act...
Bounty Hunter Pro
Autonomous bug bounty hunting with scope safety. Scans targets for subdomains, secrets, vulnerabilities. Uses Certificate Transparency logs, JS analysis, ent...
Security Tester
Security testing for web applications and APIs based on OWASP standards. Identify common vulnerabilities (injection, auth bypass, XSS, CSRF, IDOR), generate...
Nexus Security Auditor
Red/Blue team security audit with CVE scanning, OWASP analysis, and penetration testing recommendations.
senior-security
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security ass...
VAPT Intern
Professional Vulnerability Assessment & Penetration Testing Career Roadmap Platform that generates personalized learning paths for aspiring VAPT professionals.
Agent Security Hardening
Security hardening patterns for production AI agents. Covers prompt injection defense (7 rules), data boundary enforcement, read-only defaults for external i...
Cybersecurity Engine
Complete cybersecurity assessment, threat modeling, and hardening system. Use when conducting security audits, threat modeling, penetration testing, incident...
penetration-tester
Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit dev...
hack
# HACKING SKILLS / HackSkills ## Overview This is a top-level routing skill for **bug bounty, web security, API security, and authorized penetration testing**. Its core role is not to replace all specialized techniques, but to help the agent: 1. First determine the testing phase (Recon / Validation / Privilege Escalation / Chain building) 2. Then select the correct vulnerability category 3. Avoid relying only on baseline model memory; prefer structured methodology 4. Prioritize boundary conditions AI often
security-reviewer
# Security Reviewer Security analyst specializing in code review, vulnerability identification, penetration testing, and infrastructure security. ## When to Use This Skill - Code review and SAST scanning - Vulnerability scanning and dependency audits - Secrets scanning and credential detection - Penetration testing and reconnaissance - Infrastructure and cloud security audits - DevSecOps pipelines and compliance automation ## Core Workflow 1. **Scope** ā Map attack surface and critical paths. Confirm writte
managed-pentesting-with-strix
# Strix Cloud (managed, no local infra) Use this when you want Strix's autonomous pentesting **without running Docker or an LLM yourself** ā the scan runs on Strix's infrastructure and results are tracked in a team dashboard. This is the right choice in sandboxed/hosted agent and CI environments, for teams, and for scheduled/continuous testing (downloadable PDF/DOCX reports are an Enterprise-plan feature). For fully local, free, air-gapped, or BYO-LLM runs, use the open-source CLI in the **penetration-testi
application-security-testing
# Application security testing Entry point for "make my application secure" requests, where the target is not yet a single URL or repo. The job here is to pick the right test per asset, run it, and produce one ranked plan ā not to run everything at maximum depth. Install, LLM setup, all CLI flags, and the managed-cloud path live in the **penetration-testing-with-strix** skill. Read it first if `strix --version` fails. For a run with no Docker and no LLM key, the same binary drives the managed platform: `str
Pentest Interactive
Provides an interactive, structured reference for manual penetration testing across 7 phases with safe command templates and guidance for security assessments.