skills.rest
aivos-xie
aivos-xieCOMMUNITY
Explore all skills by this author →
GitHub

network-pentest

Scans, enumerates, and exploits vulnerabilities in a network using penetration testing tools.

1|Updated Jun 9, 2026
Search Tags:#vulnerability assessment#penetration testing#privilege escalation#lateral movement#network pentest
One-click install
npx skills add https://github.com/aivos-xie/hermes-skills --skill network-pentest-aivos-xie
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: network-pentest
Source: https://github.com/aivos-xie/hermes-skills/tree/main/security/network-pentest
Command: npx skills add https://github.com/aivos-xie/hermes-skills --skill network-pentest-aivos-xie

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires crackmapexec, impacket, evil-winrm, chisel, ligolo-ng, proxychains, sshuttle, responder, ntlmrelayx, bloodhound, mimikatz, pypykatz, certipy, powerview, psexec, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill offers a comprehensive set of tools and techniques for performing network penetration testing, helping security professionals identify and exploit vulnerabilities in networks.

Core Features & Use Cases

  • Vulnerability Assessment: Utilize tools like CME and Impacket to scan and enumerate network resources.
  • Lateral Movement: Implement techniques like NTLM Relay and Kerberos attacks for moving laterally within a network.
  • Privilege Escalation: Leverage tools like BloodHound and Mimikatz to escalate privileges and maintain persistence.
  • Use Case: Imagine you are tasked with assessing the security of a corporate network. This Skill can be used to scan for open ports, enumerate services, and perform advanced attacks to uncover potential security breaches.

Quick Start

Use the network-pentest skill to perform a network scan on the target environment.

Frequently Asked Questions about network-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform lateral movement and NTLM relay attacks during a network pentest?▼

Network pentest utilizes CrackMapExec and BloodHound to scan network resources and enumerate Active Directory attack paths. This identifies misconfigurations and vulnerable services across corporate domains for vulnerability assessment.

What's the best way to enumerate Active Directory environments for vulnerability assessment?▼

Network pentest utilizes CrackMapExec and BloodHound to scan network resources and enumerate Active Directory attack paths. This identifies misconfigurations and vulnerable services across corporate domains for vulnerability assessment.

How do I escalate privileges using Mimikatz and BloodHound in a network security audit?▼

Network pentest leverages tools like impacket and ntlmrelayx to execute NTLM relay attacks for lateral movement. This enables security professionals to move through network segments by relaying authentication sessions across enumerated resources.

Do I need proxychains and chisel to pivot through isolated network segments?▼

Yes, network pentest includes proxychains, chisel, and ligolo-ng to route traffic and pivot through isolated network segments. These tools establish tunnels allowing packet analysis and exploitation tools to reach internal targets.

Can I use evil-winrm and psexec for remote session hijacking and exploitation?▼

Network pentest supports evil-winrm and psexec for remote service execution and session hijacking. Security professionals use these tools to maintain persistence and execute payloads on compromised Windows machines.

How does Kerberos delegation exploitation work with certipy and powerview?▼

Kerberos attacks use powerview to query domain trusts and certipy to abuse AD certificate services. This allows penetration testers to forge tickets and escalate privileges via certificate template misconfigurations.

Related Skills

Ed1s0nZEd1s0nZ
5.6k

network-penetration-testing

Execute network penetration testing phases with Nmap, Nessus, and Metasploit.

Community
Advanced
enderphan94enderphan94
1

chain-scan

Detect and analyze interconnected security findings to map complete attack chains.

Community
Advanced
letta-ailetta-ai
134

crack-7z-hash

Extract 7z archive hashes and recover passwords using cracking frameworks.

Official
Advanced
rajyeole6rajyeole6

agency-penetration-tester

Conduct authorized penetration testing across network, web, and cloud infrastructure.

Community
Advanced