Identify and validate security weaknesses using OWASP ASVS and PTES methodologies.
npx skills add https://github.com/grant-vine/wunderkind --skill pen-tester
Please help me install this Agent Skill. Skill: pen-tester Source: https://github.com/grant-vine/wunderkind/tree/main/skills/pen-tester Command: npx skills add https://github.com/grant-vine/wunderkind --skill pen-tester
The Pen Tester skill helps security teams and responsible researchers identify and prove vulnerabilities in target systems by thinking like an attacker, following structured methodologies, and providing repeatable proof-of-concept demonstrations.
Provide the target system details and desired scope, then initiate a guided penetration test using the attack patterns outlined.
High-intent search queries and answers about installing and using this skill.
Penetration testing simulations apply attacker-style methodologies to test authentication, authorization, and session management. They identify vulnerabilities using structured techniques like JWT algorithm confusion, IDOR, and privilege escalation checks.
Generating reproducible proof-of-concept outputs involves documenting attack evidence and reproducible PoC commands. This structured reporting validates security weaknesses and directly guides remediation and verification efforts.
Yes, vulnerability validation can be structured using OWASP ASVS guidance and PTES methodology. These frameworks enable structured testing across input validation, business logic, and session management in scoped, permissioned environments.
Yes, penetration testing works for identifying business logic and input validation weaknesses. Attacker-mindset testing simulates real-world scenarios across these domains to uncover systemic vulnerabilities in target systems.
Testing session management utilizes attack patterns including brute force checks, rate limit analysis, force browsing, and session-related attacks. These controlled PoCs validate authentication and session vulnerabilities.
Attack simulation should not be used outside of scoped, permissioned environments. Controlled PoC testing requires explicit authorization to ensure ethical offensive security workflows and prevent unauthorized system access.
ABLER-Digital-ServicesDefine system actors and create an actor definition document for authorization design.
dnvitiGenerate structured remediation tasks from security vulnerability findings with severity classification.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
wgpsecEnumerate subdomains, scan ports, fingerprint assets, and validate POCs.
