Pentest Commands

Provide Nmap, Metasploit, Hydra, John the Ripper, and Nikto commands for penetration testing.

Updated Apr 6, 2026
One-click install
npx skills add https://github.com/gerald-ica/dev-tool-configs --skill pentest-commands-gerald-ica
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Pentest Commands
Source: https://github.com/gerald-ica/dev-tool-configs/tree/main/gemini/skills/pentest-commands
Command: npx skills add https://github.com/gerald-ica/dev-tool-configs --skill pentest-commands-gerald-ica

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, metasploit, hydra, john, nikto, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive command reference for penetration testing tools, enabling quick command lookup during security assessments and helping users perform various penetration testing tasks efficiently.

Core Features & Use Cases

  • Network Scanning: Utilize Nmap for host discovery, port scanning, and service detection.
  • Exploitation: Execute Metasploit commands to search for and use exploits.
  • Password Cracking: Employ Hydra and John the Ripper for brute force attacks.
  • Web Application Testing: Use Nikto for scanning web vulnerabilities.
  • Use Case: A security professional needs to quickly identify open ports on a target system and exploit a known vulnerability to gain access.

Quick Start

Use the pentest-commands skill to perform a full network scan on the target IP address '192.168.1.1'.

Frequently Asked Questions about Pentest Commands

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I execute a network scan and exploit a known vulnerability on a target system?

Network scanning and exploitation are performed by running Nmap for host discovery and port detection, then using Metasploit commands to search for and execute exploits against identified services. This provides quick command lookup for gaining system access during security assessments.

What is the best way to perform brute force attacks for password cracking during a security assessment?

Password cracking via brute force attacks is executed using Hydra and John the Ripper. These tools supply the necessary command references to efficiently perform credential attacks against target systems during penetration testing tasks.

Do I need to install Nmap and Metasploit before using this penetration testing command reference?

Yes, Nmap and Metasploit must be installed on your system. This skill requires Nmap, Metasploit, Hydra, John the Ripper, and Nikto to be pre-installed because it provides a command reference for these specific penetration testing tools.

Can I use Nikto for web application testing and vulnerability scanning?

Yes, Nikto is utilized for web application testing to scan web vulnerabilities. The skill provides command references enabling security professionals to quickly look up and execute Nikto scans during security assessments.

What commands are available for host discovery and service detection during network scanning?

Network scanning commands utilize Nmap for host discovery, port scanning, and service detection. The skill offers a comprehensive command reference to help users perform these penetration testing tasks efficiently on target IP addresses.