pentest-coordinator

Coordinate pentest campaigns with a ReAct loop for recon, exploitation, and privilege escalation.

Updated Nov 22, 2025

Search Tags:#automation #orchestration #state-management #coordinator #pentest #security-testing

Ready to run

npx skills add https://github.com/CharlesKozel/vulhub_automated_pentester --skill pentest-coordinator

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: pentest-coordinator
Source: https://github.com/CharlesKozel/vulhub_automated_pentester/tree/main/agents/claude/skills/coordinator
Command: npx skills add https://github.com/CharlesKozel/vulhub_automated_pentester --skill pentest-coordinator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill coordinates automated penetration testing campaigns using a ReAct-inspired loop to manage reconnaissance, exploitation, and privilege escalation, maintaining a unified state and progress toward capturing both user and root indicators.

Core Features & Use Cases

Autonomous coordination: orchestrates reconnaissance, exploitation, and privilege escalation steps across tools and data sources.
Stateful execution: maintains a .pentest-state.json to track discovered assets, flags, attack plans, and progress.
Safety and autonomy: enforces circuit breakers, prevents stagnation, and enables independent pivoting through complex attack scenarios in controlled environments.
Use Cases: security assessment labs, red-team simulations, and automated security triage in CI/CD pipelines.

Quick Start

Start the coordinator against a target IP to begin automated reconnaissance and progression through exploitation and privilege escalation until flags are captured.

Frequently Asked Questions about pentest-coordinator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate penetration testing orchestration across reconnaissance, exploitation, and privilege escalation?▼

Automated penetration testing orchestration coordinates reconnaissance, exploitation, and privilege escalation phases through a ReAct-inspired loop, maintaining unified state in .pentest-state.json to track assets and progress until user and root indicators are captured.

Can I run autonomous pentest campaigns in isolated lab environments?▼

Yes, autonomous pentest campaigns run effectively in isolated lab or VulHub-like environments, executing continuous security testing workflows while enforcing circuit breakers to prevent stagnation and enable independent pivoting through complex attack scenarios.

How does state management work for tracking flags and attack plans during a pentest?▼

State management for pentest tracking uses a .pentest-state.json file to persist discovered assets, flags, loaded attack plans, and execution progress, ensuring the coordinator maintains context across reconnaissance and exploitation phases.

What is the best way to coordinate red-team simulations without manual intervention?▼

Coordinating red-team simulations without manual intervention uses an autonomous ReAct-inspired loop to manage attack phases, loading plans from AD_ATTACK_SUPPLEMENT.md and integrating with knowledge bases to capture both user and root flags.

Does automated security testing work with CI/CD pipelines for continuous triage?▼

Automated security testing integrates with CI/CD pipelines for continuous triage by autonomously coordinating assessment campaigns, applying circuit breakers to manage execution and capturing target indicators in controlled environments.

How do I prevent stagnation during autonomous privilege escalation attempts?▼

Preventing stagnation during autonomous privilege escalation relies on enforced circuit breakers within the coordination loop, enabling independent pivoting and continuous operation when facing complex attack scenarios in the target environment.