skills.rest
Wyl-cmd
Wyl-cmdCOMMUNITY
Explore all skills by this author →
GitHub

auto-vuln-hunt

Automates reconnaissance, vulnerability scanning, and PoC verification against a target URL.

6|Updated Jan 31, 2026
Search Tags:#penetration testing#reconnaissance#vulnerability scanning#security assessment#bug bounty#kali linux#poc verification
One-click install
npx skills add https://github.com/Wyl-cmd/kxns-cli --skill auto-vuln-hunt-wyl-cmd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auto-vuln-hunt
Source: https://github.com/Wyl-cmd/kxns-cli/tree/main/src/kxns_cli/skills/auto-vuln-hunt
Command: npx skills add https://github.com/Wyl-cmd/kxns-cli --skill auto-vuln-hunt-wyl-cmd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually coordinating dozens of Kali Linux tools for reconnaissance, vulnerability scanning, and proof-of-concept verification is slow and error-prone. This Skill turns a natural-language request like "find vulnerabilities on example.com" into a structured, multi-phase penetration testing workflow with verified findings. ## Core Features & Use Cases - Three-Phase Workflow: Runs parallel reconnaissance (subfinder, nmap, whatweb, wafw00f, httpx), routes results to specialized vulnerability probes (sqlmap, nuclei, nikto, wpscan), then confirms every suspected issue with a real PoC request. - Anti-Fabrication Guardrails: Enforces strict rules requiring tool output, timestamps, and reproducible PoCs for every reported finding, preventing unverified vulnerability claims. - Standardized Reporting: Emits each confirmed issue via ReportFinding with severity, description, PoC, and remediation, plus final report.json and report.md files. - Use Case: A bug bounty hunter types "帮我挖 target.com 的漏洞" and receives a live-streamed scan that ends with a table of confirmed high/critical findings and exportable reports. ## Quick Start Ask the agent to hunt vulnerabilities on a specific target, for example: "Find high-severity vulnerabilities on https://example.com and give me a verified report."

Frequently Asked Questions about auto-vuln-hunt

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an automated vulnerability scan on a website?▼

Provide the target URL in natural language, such as "find vulnerabilities on https://example.com". The workflow runs parallel reconnaissance with subfinder, nmap, and httpx, then routes results to scanners like nuclei, sqlmap, and nikto before verifying each finding with a PoC.

What tools does this vulnerability hunting workflow use?▼

It orchestrates Kali Linux tools through RunKali, including subfinder and dnsenum for recon, nmap and masscan for port scanning, httpx and whatweb for fingerprinting, and nuclei, nikto, sqlmap, commix, and wpscan for vulnerability detection.

Does this workflow work on Windows or macOS?▼

No, it requires a Kali Linux environment because the scanning toolchain (nmap, masscan, sqlmap, and related utilities) depends on Linux. On Windows, use WSL 2 with Kali Linux to get full functionality.

How are reported vulnerabilities verified before reporting?▼

Every suspected issue must pass a mandatory verification phase where a real PoC request is executed and the actual tool output or HTTP response is captured. Findings without reproducible evidence, timestamps, and raw tool output are not reported.

What output does the vulnerability hunt produce?▼

Each confirmed finding is emitted via ReportFinding with severity, description, PoC, and remediation guidance. The final summary includes a findings table plus paths to generated report.json and report.md files.

Related Skills

Explore More Software Engineering Skills→
iulianditaiuliandita
2

kali-linux

Manage Kali Linux package repositories, branches, and metapackage deployments.

Community
Advanced
mindfortaimindfortai
16

finding-review

Triage cybersecurity findings for validity, exploitability, impact, and evidence quality.

Official
Advanced
jonnabiojonnabio
6

security-audit

Detect security vulnerabilities in code and configurations during code review workflows.

Community
Advanced
balsm-healthbalsm-health
2

exploiting-sql-injection-vulnerabilities

Detect and exploit SQL injection vulnerabilities in web applications during penetration tests.

Official
Advanced