full-attack-chain

Automating an end-to-end penetration testing workflow involves executing recon, scanning, exploitation, data extraction, and post-exploitation. This Skill structures the entire attack chain to generate consistent evidence and comprehensive professional reports for authorized security assessments.

Post-exploitation reporting includes mandatory PoCs, logs, screenshots, and an evidence index for traceability. It documents step-by-step attack chains, tools used, data extracted at each step, demonstrated impact, and compliance fields required for engagement documentation.

You configure target scope by defining the domain, IP, in-scope assets, and permissions during interactive engagement setup. This target configuration guides the automated assessment, ensuring the attack chain operates strictly within authorized security assessment boundaries.

Yes, this attack chain automation is designed for authorized security assessments of complex environments. It applies structured outputs, safety checks, and mandatory data aggregation to handle comprehensive penetration testing workflows while maintaining compliance.

Payloads and evidence are aggregated using mandatory data aggregation via get_payload_schema and aggregate_results. This process indexes evidence, consolidates extracted data, and produces structured outputs that feed directly into the final engagement documentation and comprehensive report.

Automating penetration testing workflows requires strict adherence to authorized engagement scope and permissions. Safety checks and compliance fields are mandatory, meaning the automation should not be used outside explicitly defined, authorized security assessment boundaries.