intranet-pentest

Automate intranet penetration testing from reconnaissance to reporting.

1|Updated Jun 26, 2026
One-click install
npx skills add https://github.com/xijunww/Pentest --skill intranet-pentest
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: intranet-pentest
Source: https://github.com/xijunww/Pentest/tree/main/packages/core/src/config/skills/builtin/intranet-pentest
Command: npx skills add https://github.com/xijunww/Pentest --skill intranet-pentest

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires fscan, PrintSpoofer, mimikatz, nps-operator, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines and automates various stages of intranet penetration testing, reducing manual effort and speeding up the testing process.

Core Features & Use Cases

  • Multi-Stage Penetration Testing: Supports the entire penetration testing process from reconnaissance, vulnerability discovery, and exploitation to post-exploitation and reporting.
  • Skill Integration: Integrates with other built-in skills like nps-operator for advanced tasks like creating SOCKS5 tunnels.
  • Use Case: For example, if a user mentions they need to perform an internal network penetration test, this skill can automatically generate scripts for scanning the network, discovering services, and attempting exploits.

Quick Start

To start the intranet penetration testing process, use the intranet-pentest skill by typing 'intranet-pentest' in your environment.

Frequently Asked Questions about intranet-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate intranet penetration testing tasks like reconnaissance and exploitation?

Automating intranet penetration testing involves using scripts to handle network scanning, vulnerability discovery, and exploitation. This skill orchestrates tools like fscan and mimikatz to execute the full testing process automatically.

Can I use mimikatz and PrintSpoofer for Windows privilege escalation during network security testing?

Yes, network security testing can leverage mimikatz for credential harvesting and PrintSpoofer for Windows privilege escalation. These integrated tools automate post-exploitation tasks across the intranet penetration testing workflow.

Does intranet security testing require an NPS C2 channel to run vulnerability discovery scripts?

Yes, intranet security testing requires an NPS C2 channel for execution. Establishing this command and control infrastructure is necessary to deploy scanning and exploitation scripts across the target network.

What is the best way to perform internal network scanning and service discovery using fscan?

The best way to perform internal network scanning and service discovery is by generating automated scripts that invoke fscan. This skill automates the scanning process to identify live hosts and open services across the network.

Do I need the nps-operator skill to create SOCKS5 tunnels for advanced penetration testing?

Yes, you need the nps-operator skill to create SOCKS5 tunnels for advanced penetration testing operations. This integration enables advanced tasks like tunneling traffic through the compromised network infrastructure.

Why does automated exploitation testing require post-exploitation reporting and credential harvesting?

Automated exploitation testing requires post-exploitation reporting and credential harvesting to document vulnerabilities and extract valid credentials. Mimikatz automates this credential gathering to facilitate lateral movement during the assessment.