penetration-tester-master

Execute a structured penetration testing lifecycle from reconnaissance to reporting.

Updated Feb 6, 2026

Search Tags:#security #vulnerability assessment #penetration testing #exploitation #red team #osint #privesc

Ready to run

npx skills add https://github.com/ntuan2502/piggy --skill penetration-tester-master

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: penetration-tester-master
Source: https://github.com/ntuan2502/piggy/tree/main/.agent/skills/penetration-tester-master
Command: npx skills add https://github.com/ntuan2502/piggy --skill penetration-tester-master

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, wireshark, sublist3r, sqlmap, burp suite, metasploit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive, unified lifecycle for identifying, exploiting, and reporting security vulnerabilities, acting as an Elite Red Team Lead and Professional Pentester.

Core Features & Use Cases

Structured Hacking Methodology: Follows a clear plan from Reconnaissance to Reporting.
Multi-Vector Exploitation: Targets Web, API, and Cloud environments, covering OWASP Top 10 and cloud misconfigurations.
Post-Exploitation & PrivEsc: Includes techniques for privilege escalation in Linux, Windows, and Active Directory environments.
Use Case: Simulate a real-world penetration test against a web application, identify vulnerabilities like SQL Injection, exploit them, escalate privileges, and generate a detailed report with remediation steps.

Quick Start

Initiate a penetration test by classifying the target sector and beginning the reconnaissance phase.

Frequently Asked Questions about penetration-tester-master

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I execute a full penetration test lifecycle from reconnaissance to reporting?▼

A penetration test lifecycle follows a structured hacking methodology from initial reconnaissance to final reporting, identifying vulnerabilities and providing remediation guidance. You execute this by scanning targets, exploiting weaknesses across web and cloud environments, and documenting security assessment findings.

What techniques are used for privilege escalation during post-exploitation?▼

Privilege escalation during post-exploitation involves exploiting configuration flaws or vulnerabilities to gain elevated permissions. The process targets Linux, Windows, and Active Directory environments, moving from initial access to higher-level control to simulate red team operations.

Does this penetration testing methodology cover web, API, and cloud exploitation?▼

Yes, this penetration testing methodology covers multi-vector exploitation across web, API, and cloud environments. It identifies vulnerabilities like SQL Injection, addresses OWASP Top 10 flaws, and detects cloud misconfigurations during the security assessment.

Can I use nmap, sqlmap, and Burp Suite for vulnerability assessment?▼

Yes, you can use nmap, sqlmap, and Burp Suite for vulnerability assessment. These tools support the structured hacking methodology by enabling network scanning, database exploitation, and web application proxying to identify and validate security weaknesses.

What is the best way to identify and exploit cloud misconfigurations?▼

The best way to identify and exploit cloud misconfigurations is through a structured hacking methodology targeting multi-vector exploitation. This approach detects insecure cloud configurations, validates the exploitation path, and provides detailed remediation guidance in the final report.

How does OSINT fit into the reconnaissance phase of a red team operation?▼

OSINT fits into the reconnaissance phase by gathering publicly available information to map the target's external footprint. This structured hacking methodology uses open-source intelligence to identify potential entry points before active exploitation begins in red team operations.