skills.rest
Xerrion
XerrionCOMMUNITY
Explore all skills by this author →
Website𝕏@TheRealXerrionGitHub

pentest-dast

Run authorized DAST and infrastructure security tests on live targets.

Updated Mar 5, 2026
Search Tags:#pentest#security-testing#dast#container-testing#iac-scanning#live-targets#web-probing
One-click install
npx skills add https://github.com/Xerrion/opencode --skill pentest-dast
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pentest-dast
Source: https://github.com/Xerrion/opencode/tree/main/skills/pentest-dast
Command: npx skills add https://github.com/Xerrion/opencode --skill pentest-dast

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

DAST, infrastructure, authentication, and container testing workflows for live targets, enabling security teams to assess and prove the security posture of owned or authorized systems.

Core Features & Use Cases

  • Target Discovery with nmap for service and version fingerprinting, plus Docker-Compose inventory parsing to map internal services.
  • Web Probing with nuclei and ffuf for CVE pattern matching, exposure detection, and path discovery; SQLi testing with sqlmap.
  • Auth Attacks including JWT manipulation, session fixation, and privilege escalation vectors within approved scopes.
  • Bounded Resource Exhaustion probes to identify single-node denial conditions without running distributed attacks.
  • IaC Scanning guidance using common tooling to detect misconfigurations in Terraform, CloudFormation, and Kubernetes manifests.
  • Container Scanning and Escape Probes to assess run-time hardening and potential container escape risks.
  • PoC Capture & Safety: each verified finding includes a reproducible PoC script stored under .pentest/exploits with safe output capture.
  • Rate Limiting & Safety: respect configured rate limits, abort on 5xx floods, and maintain scope discipline during testing.
  • Output artifacts: documented evidence and findings under .pentest/evidence paths.

Quick Start

Initiate a live-target security assessment within scope and begin with a reconnaissance pass using nmap to identify services and inventory.

Frequently Asked Questions about pentest-dast

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run DAST security testing on live web apps and APIs?▼

DAST security testing on live web apps and APIs is performed by combining nmap reconnaissance, nuclei probing, ffuf path discovery, and sqlmap injection testing to identify vulnerabilities within an authorized scope. Generated evidence and PoC scripts are saved under .pentest.

What is the best way to test for JWT manipulation and privilege escalation in authorized targets?▼

Testing for JWT manipulation and privilege escalation involves applying specific authentication attack patterns within approved scopes to verify session fixation and escalation vectors. Results are validated with reproducible PoC scripts stored under .pentest/exploits with safe output capture.

Can I scan Terraform and Kubernetes manifests for IaC misconfigurations during a live pentest?▼

You can scan Terraform, CloudFormation, and Kubernetes manifests for misconfigurations using integrated IaC scanning guidance during live engagements. This assesses cloud infrastructure posture alongside container scanning and web probing checks.

Does this DAST approach include container escape probes and runtime hardening checks?▼

This DAST approach includes container scanning and escape probes to assess runtime hardening and identify potential container escape risks. It parses Docker-Compose inventories to map internal services before executing the security checks.

How do I prevent denial of service conditions when running resource exhaustion probes?▼

Preventing denial of service during resource exhaustion probes requires running bounded tests to identify single-node denial conditions. The testing workflow respects configured rate limits and aborts automatically on 5xx flood detection to maintain scope discipline.

What limitations exist when testing live targets for CVE patterns and exposure detection?▼

Limitations when testing live targets for CVE patterns include strict scope discipline and safety controls that abort probing on 5xx floods. Distributed denial of service attacks are not performed; only bounded resource exhaustion tests are executed against authorized systems.

Related Skills

Explore More Software Engineering Skills→
guaidao2guaidao2
81

nmap

Discover hosts, ports, services, versions, and NSE script findings with nmap.

Community
Intermediate
ccashwellccashwell
120

audit-verification

Generate PoCs and test them on forked mainnets to verify audit findings.

Community
Advanced
alexander-danilenkoalexander-danilenko
14

devops-engineer

Automate CI/CD pipelines, Dockerfiles, Kubernetes manifests, and Terraform modules.

Community
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced