skills.rest
AndyAnh174
AndyAnh174COMMUNITY
Explore all skills by this author →
WebsiteGitHub

Pentest Commands

Reference commands for Nmap, Metasploit, Nikto, SQLMap, Hydra, John the Ripper, Aircrack-ng, and Tshark.

Updated Jan 8, 2026
Search Tags:#security#vulnerability#commands#nmap#pentest#metasploit#hacking
One-click install
npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill pentest-commands-andyanh174
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Pentest Commands
Source: https://github.com/AndyAnh174/BanThuoc-SEO/tree/main/.agent/skills/pentest-commands
Command: npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill pentest-commands-andyanh174

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a comprehensive command reference for essential penetration testing tools, enabling quick lookup and execution of commands during security assessments.

Core Features & Use Cases

  • Network Scanning: Utilize Nmap for host discovery, port scanning, service detection, and NSE script execution.
  • Exploitation: Leverage Metasploit for searching and executing exploits, and generating payloads with msfvenom.
  • Vulnerability Scanning: Employ Nikto for web server vulnerability scanning.
  • Credential Cracking: Use Hydra for brute-forcing credentials and John the Ripper for cracking password hashes.
  • Packet Analysis: Reference Tshark for capturing and analyzing network traffic.
  • Use Case: When asked to "scan a network for open ports and identify web vulnerabilities," this skill provides the exact Nmap and Nikto commands needed.

Quick Start

Run the pentest commands skill to find open ports on 192.168.1.1 using nmap.

Frequently Asked Questions about Pentest Commands

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the right Nmap commands for network enumeration and service detection?▼

To perform network enumeration, this reference provides exact Nmap commands for host discovery, port scanning, service detection, and executing NSE scripts to identify open ports and services.

What is the best way to generate payloads and execute exploits using Metasploit?▼

For exploitation, the reference details how to leverage Metasploit for searching and executing exploits, alongside generating custom payloads using msfvenom during security assessments.

Can I use this reference to crack password hashes and brute-force credentials?▼

Yes, you can use this reference to crack password hashes with John the Ripper and brute-force authentication credentials using Hydra commands for security testing.

How do I scan a web server for vulnerabilities with Nikto?▼

To scan web servers for vulnerabilities, this reference supplies specific Nikto commands needed to identify common security flaws and misconfigurations during assessments.

What tools do I need to capture and analyze network traffic with Tshark?▼

For packet analysis, the reference outlines Tshark commands to capture and analyze network traffic, requiring user authorization and understanding of tool syntax for effective operation.

Do I need prior knowledge of pentesting tool syntax to use these commands effectively?▼

Yes, effective operation requires an understanding of tool syntax and user authorization, as this reference facilitates quick lookup and execution of commands for tools like SQLMap and Aircrack-ng.

Related Skills

Explore More Software Engineering Skills→
Ed1s0nZEd1s0nZ
5.6k

network-penetration-testing

Execute network penetration testing phases with Nmap, Nessus, and Metasploit.

Community
Advanced
ekremmkasapekremmkasap

protocol-reverse-engineering

Reverse-engineer network protocols from traffic captures into specifications and parsers.

Community
Advanced
valITinovalITino
7

network-infrastructure

Automate network infrastructure assessments for authorized pentests.

Community
Advanced
cxnaivecxnaive

web-pentest

Perform authorized web application penetration testing with reconnaissance, vulnerability analysis, and proof-based exploitation.

Community
Advanced