network-pentest

Run reconnaissance, scanning, and exploitation workflows against network targets.

60|14|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/brucesongs/kali-claw --skill network-pentest-brucesongs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: network-pentest
Source: https://github.com/brucesongs/kali-claw/tree/main/skills/network-pentest
Command: npx skills add https://github.com/brucesongs/kali-claw --skill network-pentest-brucesongs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Network pentesting is a complex, time-consuming process. This Skill consolidates reconnaissance, scanning, enumeration, vulnerability assessment, exploitation, traffic capture, and MITM testing into a cohesive, repeatable workflow that can be adapted to multiple network environments.

Core Features & Use Cases

  • Comprehensive attack chain: recon, port scanning, service fingerprinting, vulnerability assessment, exploitation, traffic capture, and MITM attacks.
  • Tooling guidance: integrates with widely-used open-source utilities (nmap, tcpdump, tshark, bettercap, Responder, arp-scan, enum4linux, mitmproxy) to conduct realistic network engagements.
  • Use case coverage: internal network assessments, network architecture audits, protocol security testing, incident-response validation, and defense-in-depth verification.

Quick Start

Initiate a network security assessment against your target environment by loading the defined payloads and executing the recommended scan workflow.

Frequently Asked Questions about network-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate network penetration testing across subdivided VLANs and cloud networks?

Network penetration testing across VLANs and cloud networks is automated by executing an integrated workflow of reconnaissance, scanning, enumeration, and exploitation. This provides structured security risk assessment outputs for internal environments.

What is the best way to perform an end-to-end attack chain including reconnaissance and MITM attacks?

An end-to-end attack chain combining reconnaissance and Man-in-the-Middle (MITM) attacks is executed using tools like Nmap and Bettercap. This workflow identifies network vulnerabilities and validates defensive postures through traffic capture and exploitation.

Does this penetration testing workflow integrate with open-source utilities like tcpdump and tshark for traffic capture?

Yes, the penetration testing workflow integrates with open-source utilities including tcpdump, tshark, and mitmproxy for traffic capture. It leverages these tools to conduct realistic protocol security testing and network architecture audits.

Can I use Nmap and enum4linux for service fingerprinting and enumeration during internal network assessments?

Yes, you can use Nmap and enum4linux for service fingerprinting and enumeration. The workflow leverages these tools to perform comprehensive vulnerability assessment and validate security risks during internal network assessments.

How to validate incident response and defense-in-depth verification using network security assessments?

Incident response validation and defense-in-depth verification are achieved by executing structured vulnerability assessment and exploitation workflows. This identifies security risks and tests the defensive posture across your defined network targets.

Are there limitations when running Bettercap and Responder for exploitation in complex network environments?

Limitations when running Bettercap and Responder depend on network configurations and target environments. The workflow provides error handling during exploitation and MITM steps to manage complexities in subdivided VLANs and cloud networks.