iom-pentest

Automating penetration testing workflows with MCP tooling requires orchestrating reconnaissance, privilege escalation, credential harvesting, and lateral movement through phase-aware decision logic and OPSEC considerations. This skill drives that end-to-end lifecycle autonomously.

An OODA loop in red-team assessments is an adaptive decision-making cycle of Observe, Orient, Decide, and Act used to continuously adjust penetration tactics. This skill applies it across reconnaissance, escalation, and lateral movement phases.

Yes, you need an active implant session to run IoM-based pentest automation. The workflow also requires access to IoM MCP tooling and IAM privilege context commands implemented via mcp__iom__execute_command for authorized assessments.

Yes, you can use automated pentest workflows for Windows endpoints and enterprise networks. The skill orchestrates privilege escalation, credential harvesting, and lateral movement specifically across these environments for authorized assessments.

Maintaining OPSEC during automated lateral movement and persistence requires phase-aware execution guidance and session management. This skill integrates OPSEC considerations directly into the adaptive decision-making loop for authorized red-team engagements.

Limitations of autonomous penetration testing in IoM environments include the strict requirement for a working implant session and specific mcp__iom__execute_command implementations. It is constrained to authorized assessments and requires continuous IAM privilege context validation.