Identify and exploit CVEs on target systems using nmap and searchsploit.
npx skills add https://github.com/hanc00l/nemo-agent --skill cve-exploitation
Please help me install this Agent Skill. Skill: cve-exploitation Source: https://github.com/hanc00l/nemo-agent/tree/main/claude-code/.claude/skills/pentest/cve Command: npx skills add https://github.com/hanc00l/nemo-agent --skill cve-exploitation
Many penetration testers spend excessive time manually identifying services, matching them to vulnerable CVEs, and gathering exploit code. This skill streamlines that process into a repeatable workflow.
Ask the cve-exploitation skill to scan target 10.0.0.5, match CVEs, and automatically attempt relevant exploits.
High-intent search queries and answers about installing and using this skill.
To automate CVE discovery and exploitation, you can use this skill to run nmap and whatweb scans for service fingerprinting, lookup matching CVEs, and automatically execute relevant exploits retrieved via searchsploit against the target hosts.
Automated CVE matching works by taking nmap and whatweb service fingerprinting results, looking up high-risk CVEs based on the identified service and version, and gathering corresponding exploit code for execution.
Yes, you can use searchsploit within this skill to automatically pull exploit code based on matched CVEs and execute it against the target system to establish a foothold.
Yes, this skill is designed for red-team engagements and CTF competitions, allowing you to quickly turn a list of enumerated target hosts into exploited footholds through automated vulnerability matching and execution.
The best way to find vulnerable CVEs from target hosts is to apply an automated workflow that fingerprints services using nmap, queries a built-in CVE database for matching vulnerabilities, and fetches proof-of-concept exploit code.
Yes, you need nmap and searchsploit installed as prerequisite tools, because this skill relies on them to perform service discovery, fingerprint target systems, and retrieve exploit code for automated execution.
L3DigitalNetScan networks for hosts, ports, services, and operating systems using nmap.
jcastillotxEnumerate Linux systems for privilege escalation paths to root.
bpnrockstarFingerprint SSL VPN appliances and match CVEs for exploit detection.
transilienceaiCoordinate CVE vulnerability testing across identified technology stacks and APIs.
