skills.rest
ArianHobson333
ArianHobson333COMMUNITY
Explore all skills by this author →
GitHub

infrastructure

Scan networks and detect vulnerabilities using nmap, dig, and Scapy.

7|1|Updated Apr 14, 2026
Search Tags:#vulnerability assessment#penetration testing#network security#port scanning#dns attack
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill infrastructure-arianhobson333
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: infrastructure
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/communitytools/projects/pentest/.claude/skills/infrastructure
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill infrastructure-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires Scapy, nmap, Wireshark, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates network infrastructure testing, simplifying the process of identifying and analyzing vulnerabilities in network services, protocols, and perimeter security.

Core Features & Use Cases

  • Port Scanning: Identify open ports and detect services running on them.
  • DNS Attacks: Discover vulnerabilities in DNS records, including zone transfers and cache poisoning.
  • MITM: Detect potential Man-in-the-Middle attacks using various techniques like ARP spoofing and DNS spoofing.
  • VLAN Hopping: Test for VLAN configuration vulnerabilities that could allow unauthorized access to network segments.
  • IPv6: Test for vulnerabilities specific to IPv6 implementations, including RA flooding and neighbor spoofing.
  • SMB/NetBIOS: Detect weaknesses in SMB and NetBIOS protocols that could be exploited by attackers.
  • Sniffing: Capture and analyze network traffic to uncover potential security threats.
  • DoS: Assess the resilience of a network against denial-of-service attacks.

Quick Start

Use the infrastructure skill to scan for open ports on the target network.

Frequently Asked Questions about infrastructure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform network infrastructure testing for open ports and DNS attacks?▼

Network infrastructure testing identifies vulnerabilities by scanning open ports and detecting DNS weaknesses using tools like nmap and dig. It automates the analysis of network services and perimeter security configurations.

What is VLAN hopping and how can I test for it?▼

VLAN hopping tests for configuration vulnerabilities allowing unauthorized access to network segments. By assessing switch configurations and protocol behaviors, you can detect whether attackers can bypass network segmentation boundaries.

Can I use Scapy to detect Man-in-the-Middle attacks via ARP spoofing?▼

Yes, Scapy can detect potential Man-in-the-Middle attacks by simulating ARP spoofing and DNS spoofing techniques. This uncovers MITM opportunities where traffic interception is possible on the local network.

Does this network security testing approach work with Wireshark for packet sniffing?▼

Yes, Wireshark is an external tool used for capturing and analyzing network traffic. Sniffing with Wireshark helps uncover potential security threats by inspecting packet-level data traversing the network infrastructure.

What are the limitations of using nmap for vulnerability assessment?▼

While nmap excels at port scanning and detecting running services, vulnerability assessment limitations include not fully exploiting weaknesses like SMB or IPv6 flaws without complementary tools like Scapy for deeper protocol analysis.

How do I check my network for IPv6 specific vulnerabilities like RA flooding?▼

To check for IPv6 vulnerabilities like RA flooding and neighbor spoofing, you test the IPv6 implementations directly. This identifies protocol-specific weaknesses where attackers can disrupt network availability or impersonate nodes.

Related Skills

Explore More Software Engineering Skills→
Himanshu040604Himanshu040604

protocol-reverse-engineering

Capture and analyze network traffic to reverse-engineer protocol structures.

Community
Advanced
LeoWSY-hashblueLeoWSY-hashblue
3

infrastructure

Automate network infrastructure vulnerability testing across IP addresses, ports, and protocols.

Community
Intermediate
hoanghn61hoanghn61

infrastructure

Performs authorized IP service and protocol security testing with logged evidence.

Community
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate