skills.rest
wudidike
wudidikeCOMMUNITY
Explore all skills by this author →
GitHub

pentest

Orchestrates black-box web penetration testing through a five-phase checkpoint workflow with scripts and playbooks.

27|6|Updated May 3, 2026
Search Tags:#penetration testing#reconnaissance#web security#vulnerability scanning#bug bounty#waf bypass#src
One-click install
npx skills add https://github.com/wudidike/pentest_skill --skill pentest-wudidike
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pentest
Source: https://github.com/wudidike/pentest_skill
Command: npx skills add https://github.com/wudidike/pentest_skill --skill pentest-wudidike

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, beautifulsoup4, pyyaml, dnspython, urllib3, flask, and includes scripts (resource) and references (resource) components.

What problem does it solve? It structures authorized black-box web penetration testing, SRC, and bug bounty work into an enforced checkpoint workflow so findings are evidence-based, in-scope, and reproducible instead of ad-hoc. ## Core Features & Use Cases - Five-phase checkpoint workflow: Intake (scope/compliance gate), Recon (passive), Enum (active probing), Hunt (vulnerability testing), and Report, with mandatory outputs gating each stage. - 48 executable Python scripts: fingerprinting, subdomain enumeration, directory fuzzing, JS analysis, and dedicated modules for SQLi, XSS, SSRF, SSTI, XXE, IDOR, JWT, GraphQL, HTTP smuggling, file upload, and business logic flaws, with automatic fallback when tools like nuclei or ffuf are unavailable. - On-demand knowledge base: 19 attack playbooks, 305 payloads, 263 WAF bypass techniques, 2887 real HackerOne reports, Chinese component fingerprints, and banking/telecom industry playbooks loaded only when needed. - Use Case: Given an authorized target URL, the agent confirms scope, builds a live asset matrix, prioritizes attack surfaces, tests each candidate against the matching playbook, and produces a report where every finding includes both a curl command and a Burp raw request PoC. ## Quick Start Tell the agent to perform an authorized penetration test on your target URL, for example by saying: run a pentest on https://example.com within the approved scope.

Frequently Asked Questions about pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a black-box web penetration test with an AI agent?▼

Load SKILL.md into an agent like Claude Code or Cursor, then state the authorized target URL. The agent walks through intake, recon, enumeration, hunting, and reporting phases, calling Python scripts and reading playbooks on demand at each checkpoint.

What vulnerability types does this pentest workflow cover?▼

It covers SQL injection, XSS, SSRF, SSTI, XXE, command injection, deserialization, file upload, IDOR and authorization flaws, JWT, GraphQL, HTTP request smuggling, business logic, path traversal, and framework-specific CVEs via dedicated phase scripts.

Does the framework work without nuclei or ffuf installed?▼

Yes. Each external tool has a Python fallback: nuclei falls back to a requests-based scanner, ffuf to a built-in fuzzing engine, subfinder to crt.sh plus DNS brute-force, and nmap to socket-based port scanning.

Can I run only a single phase like directory enumeration?▼

Yes. Every phase script accepts a unified CLI with --target and --output-dir arguments, so you can run phase0_fingerprint.py, phase5_dir_enum.py, or phase7b_auth_vuln.py independently without the full pipeline.

Is this penetration testing tool legal to use?▼

It is intended only for authorized security testing with explicit written permission from the target owner. The workflow enforces a compliance gate, scope confirmation, and testing red lines, and unauthorized penetration testing is illegal in most jurisdictions.

Related Skills

Explore More Software Engineering Skills→
kaminocorpkaminocorp
1

Scope Assessment

Verifies a target repository is in-scope for its bug bounty program before analysis.

Official
Intermediate
RifteoRifteo
30

bugbounty-reporter

Create and submit bug bounty reports with structured sections.

Official
Advanced
xalgordxalgord
954

collecting-open-source-intelligence

Collects OSINT on threat actors and malicious infrastructure using passive reconnaissance tools.

Community
Intermediate
chengzongcaichengzongcai
21

code-audit

Reviews source code for security vulnerabilities using Semgrep, CodeQL, and manual verification workflows.

Community
Intermediate