network-pentest

Scans TCP ports, grabs banners, and enumerates SMB, DNS, and SNMP services.

10|3|Updated Aug 10, 2026
One-click install
npx skills add https://github.com/baiqigo/baiqi-redteam-lab --skill network-pentest-baiqigo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: network-pentest
Source: https://github.com/baiqigo/baiqi-redteam-lab/tree/main/.agents/skills/network-pentest
Command: npx skills add https://github.com/baiqigo/baiqi-redteam-lab --skill network-pentest-baiqigo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires dnspython, and includes scripts (resource) components.

What problem does it solve? Manually probing hosts for open ports, running services, and misconfigured protocols is slow and error-prone. This Skill provides executable Python scripts that automate port scanning, banner grabbing, and service enumeration during authorized network security assessments. ## Core Features & Use Cases - Concurrent Port Scanning: Scan TCP ports across a target host and grab service banners to identify running software. - Service Enumeration: Enumerate SMB shares via protocol negotiation, attempt DNS zone transfers, and perform SNMP walks to surface exposed information. - Use Case: During an authorized internal penetration test, run the port scanner against a subnet to map open services, then use the enumeration script to check file servers for exposed SMB shares and DNS servers for misconfigured zone transfers. ## Quick Start Scan the target host 192.168.1.10 for open ports and enumerate its SMB and DNS services using the network pentest scripts.

Frequently Asked Questions about network-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan open ports on a network host with Python?

Use the port_scanner.py script, which performs concurrent TCP connections across a port range and grabs service banners from responding ports. Provide the target host and port range to identify exposed services.

How to enumerate SMB shares and DNS zone transfers?

The service_enum.py script sends an SMB protocol negotiation to probe shares on port 445 and attempts DNS zone transfers using dnspython's xfr query. Both functions return lists of findings or error messages.

Does DNS zone transfer require extra Python packages?

Yes, DNS zone transfer requires the dnspython package installed via pip install dnspython. Without it, the function returns a message indicating dnspython is not installed, while SMB enumeration works with the standard library.

Why does a DNS zone transfer fail against a server?

Zone transfers fail when the DNS server restricts AXFR requests to authorized secondary servers, which is the common secure configuration. A successful transfer indicates a misconfiguration worth reporting in an assessment.

When should I not run network port scanning tools?

Only run these scripts against systems you own or have explicit written authorization to test. Unauthorized port scanning and service enumeration may violate laws and organizational policies.