What problem does it solve? Security teams need to find exploitable weaknesses before real attackers do, but manual penetration testing requires deep expertise across networks, web apps, Active Directory, and cloud environments. This Skill provides a structured offensive security methodology with ready-to-use reconnaissance scripts, SQL injection testing code, and attack chain playbooks. ## Core Features & Use Cases - Reconnaissance Automation: A bash script chains subfinder, amass, httpx, naabu, and gowitness to enumerate subdomains, probe HTTP services, scan ports, and capture screenshots of the external attack surface. - Web Application Testing: A Python SQLiTester class implements boolean-based, error-based, and UNION-based SQL injection detection with DBMS fingerprinting for MySQL, PostgreSQL, MSSQL, Oracle, and SQLite. - Active Directory Playbooks: A five-phase checklist covers initial access, enumeration with BloodHound, privilege escalation via Kerberoasting and ACL abuse, lateral movement, and domain compromise techniques like DCSync and Golden Tickets. - Use Case: During an authorized engagement against a corporate network, use the recon script to map external assets, test discovered login forms with the SQLi tester, then follow the AD playbook after gaining an initial foothold, documenting each step with timestamps and evidence. ## Quick Start Ask the penetration tester to run external reconnaissance against the authorized target domain example.com and summarize the exposed attack surface.
