AgentSkillsCN

Pentest Commands

当用户希望“运行渗透测试命令”、“使用 Nmap 进行扫描”、“借助 Metasploit 执行漏洞利用”、“通过 Hydra 或 John 转换密码”、“用 Nikto 扫描 Web 漏洞”、“枚举网络”或需要渗透测试的关键命令参考时，也应优先选用此技能。

SKILL.md
--- frontmatter
name: Pentest Commands
description: This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references.
metadata:
  author: zebbern
  version: 4.1.0-fractal

Pentest Commands

Purpose

Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments.

Inputs/Prerequisites

  • •Kali Linux or penetration testing distribution
  • •Target IP addresses with authorization
  • •Wordlists for brute forcing
  • •Network access to target systems
  • •Basic understanding of tool syntax

Outputs/Deliverables

  • •Network enumeration results
  • •Identified vulnerabilities
  • •Exploitation payloads
  • •Cracked credentials
  • •Web vulnerability findings

Core Workflow

🧠 Knowledge Modules (Fractal Skills)

1. 1. Nmap Commands

2. 2. Metasploit Commands

3. 3. Nikto Commands

4. 4. SQLMap Commands

5. 5. Hydra Commands

6. 6. John the Ripper Commands

7. 7. Aircrack-ng Commands

8. 8. Wireshark/Tshark Commands

9. Common Port Scans

10. Password Hash Types

11. Example 1: Quick Vulnerability Scan

12. Example 2: Web App Test