crazyMarkyCommunity·10 Agent Skills Included

pentest-skills

Natural-language penetration testing, reconnaissance, and vulnerability reporting

Runs port scans, subdomain enumeration, directory fuzzing, and web fingerprinting through plain-language requests. Detects and exploits SQL injection, XSS, LFI, and file download flaws with pre-built payloads and scripts. Stores findings in a local database and generates formatted penetration test reports automatically.

277|29

↗

npx skills add crazyMarky/pentest-skills --all -g -y

All Skills in This Repository (10)

Pure Emerald Level Indicators

📦 In Repo

crazyMarky

recon-dir-scan

Enumerate web application directories and files using ffuf, gobuster, and feroxbuster.

exploit-sqli

Detects and exploits SQL injection vulnerabilities in web applications using automated and manual techniques.

exploit-lfi

Detect and exploit Local File Inclusion vulnerabilities in web applications.

recon-port-scan

Scan TCP and UDP ports and identify services with nmap, masscan, or rustscan.

recon-fingerprint

Identify web technologies, frameworks, CMS, and WAF/CDN solutions using whatweb, wafw00f, nuclei, and httpx.

results-storage

Store penetration testing results in a SQLite database and generate Markdown and JSON reports.

pentest-report

Generate standardized penetration test reports with Markdown formatting.

recon-subdomain

Enumerate subdomains and gather DNS records using subfinder, amass, and dnsx.

exploit-xss

Detect and exploit reflected, stored, DOM-based, and blind XSS vulnerabilities.

exploit-file-download

Detect and exploit arbitrary file download vulnerabilities using path traversal techniques.

Community

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install pentest-skills?▼

Run `npx skills add crazyMarky/pentest-skills --all -g -y` in your terminal to install all skills globally.

What can pentest-skills test?▼

It covers reconnaissance (port scans, subdomains, directories, fingerprinting) and exploitation of SQL injection, XSS, LFI, and arbitrary file download vulnerabilities.

Do I need to memorize security tool commands?▼

No. You describe the target in plain language and the agent picks the right tools like nmap, sqlmap, or ffuf, then analyzes the results for you.

Can it generate a penetration test report?▼

Yes. The results-storage and pentest-report skills save findings to a local database and produce formatted Markdown or JSON reports with severity ratings and fix advice.

Is pentest-skills legal to use?▼

Only on systems you own or have written authorization to test. Unauthorized scanning or exploitation is illegal in most jurisdictions.