network-pentest

Scans, enumerates, and exploits vulnerabilities in a network using penetration testing tools.

1|Updated Jun 9, 2026

Search Tags:#vulnerability assessment #penetration testing #privilege escalation #lateral movement #network pentest

Ready to run

npx skills add https://github.com/aivos-xie/hermes-skills --skill network-pentest-aivos-xie

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: network-pentest
Source: https://github.com/aivos-xie/hermes-skills/tree/main/security/network-pentest
Command: npx skills add https://github.com/aivos-xie/hermes-skills --skill network-pentest-aivos-xie

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires crackmapexec, impacket, evil-winrm, chisel, ligolo-ng, proxychains, sshuttle, responder, ntlmrelayx, bloodhound, mimikatz, pypykatz, certipy, powerview, psexec, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill offers a comprehensive set of tools and techniques for performing network penetration testing, helping security professionals identify and exploit vulnerabilities in networks.

Core Features & Use Cases

Vulnerability Assessment: Utilize tools like CME and Impacket to scan and enumerate network resources.
Lateral Movement: Implement techniques like NTLM Relay and Kerberos attacks for moving laterally within a network.
Privilege Escalation: Leverage tools like BloodHound and Mimikatz to escalate privileges and maintain persistence.
Use Case: Imagine you are tasked with assessing the security of a corporate network. This Skill can be used to scan for open ports, enumerate services, and perform advanced attacks to uncover potential security breaches.

Quick Start

Use the network-pentest skill to perform a network scan on the target environment.

Frequently Asked Questions about network-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform lateral movement and NTLM relay attacks during a network pentest?▼

Network pentest utilizes CrackMapExec and BloodHound to scan network resources and enumerate Active Directory attack paths. This identifies misconfigurations and vulnerable services across corporate domains for vulnerability assessment.

What's the best way to enumerate Active Directory environments for vulnerability assessment?▼

How do I escalate privileges using Mimikatz and BloodHound in a network security audit?▼

Network pentest leverages tools like impacket and ntlmrelayx to execute NTLM relay attacks for lateral movement. This enables security professionals to move through network segments by relaying authentication sessions across enumerated resources.

Do I need proxychains and chisel to pivot through isolated network segments?▼

Yes, network pentest includes proxychains, chisel, and ligolo-ng to route traffic and pivot through isolated network segments. These tools establish tunnels allowing packet analysis and exploitation tools to reach internal targets.

Can I use evil-winrm and psexec for remote session hijacking and exploitation?▼

Network pentest supports evil-winrm and psexec for remote service execution and session hijacking. Security professionals use these tools to maintain persistence and execute payloads on compromised Windows machines.

How does Kerberos delegation exploitation work with certipy and powerview?▼

Kerberos attacks use powerview to query domain trusts and certipy to abuse AD certificate services. This allows penetration testers to forge tickets and escalate privileges via certificate template misconfigurations.