kali-pentest

Name: kali-pentest
Availability: InStock
Author: XAIHT

Orchestrate authorized penetration testing workflows against scoped targets.

14|1|Updated Mar 6, 2026

Search Tags:#reporting #enumeration #pentest #kali #recon #kalier #mcp-kali-server

Ready to run

npx skills add https://github.com/XAIHT/Tlamatini --skill kali-pentest

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: kali-pentest
Source: https://github.com/XAIHT/Tlamatini/tree/main/Tlamatini/agent/skills_pkg/kali_pentest
Command: npx skills add https://github.com/XAIHT/Tlamatini --skill kali-pentest

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates an authorized, end-to-end penetration-testing workflow by orchestrating recon, enumeration, credential testing, and reporting within a defined scope.

Core Features & Use Cases

Health probe, port/service discovery (nmap), and service enumeration (gobuster/dirb/nikto/sqlmap/wpscan/enum4linux).
Credential and hash attacks (hydra/john) with optional Metasploit, followed by a formal findings report.
Use Case: Run a scoped engagement against internal or external targets and produce a consolidated security report for stakeholders.

Quick Start

Tell kali-pentest the target and allowed scope to begin the authorized assessment and receive a findings report.

Frequently Asked Questions about kali-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate an authorized pentest workflow with nmap and gobuster?▼

Automate authorized pentest workflows by orchestrating port discovery with nmap and service enumeration using gobuster, dirb, and nikto. The process identifies exposed services and weaknesses within a defined scope.

What is an authorized penetration test scope and why do I need it?▼

An authorized penetration test scope defines explicit boundaries for assessing a target. Defining the scope ensures health probes, enumeration, and credential attacks only run against permitted systems and produce valid findings.

Can I use hydra and john for credential attacks during a scoped engagement?▼

Yes, hydra and john support credential and hash attacks during a scoped engagement. The workflow integrates these tools to test authentication weaknesses and can optionally chain findings into Metasploit exploits.

How do I generate a security findings report after web app enumeration?▼

Generate a security findings report by running web app enumeration with sqlmap or wpscan and defining a report_path parameter. The workflow outputs a consolidated summary of identified weaknesses for stakeholders.

Does the kali-pentest workflow require a server_url to start?▼

Yes, kali-pentest requires a server_url input to initialize the MCP-Kali-Server Kalier integration. You must also provide the target, objective, and allowed scope to begin the authorized assessment.

What are the limitations of using automated enumeration for penetration testing?▼

Automated enumeration for penetration testing is limited to identifying exposed services and known weaknesses within a defined scope. It requires explicit authorization boundaries and cannot replace manual validation of complex logic flaws.