pentest-verification

Execute exploit commands and record outputs to verify penetration testing findings.

Updated Apr 21, 2026
One-click install
npx skills add https://github.com/jayjpatel9717/kurukshetra --skill pentest-verification
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pentest-verification
Source: https://github.com/jayjpatel9717/kurukshetra/tree/main/_universal/agents/dharmaraj/skills/pentest-verification
Command: npx skills add https://github.com/jayjpatel9717/kurukshetra --skill pentest-verification

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill independently verifies penetration testing findings, reducing the need for manual confirmation and helping to identify false positives.

Core Features & Use Cases

  • Actual Exploit Command Execution: Executes the actual exploit command against the target to verify its effectiveness.
  • Exact Output Recording: Provides detailed output as evidence of the exploit command execution.
  • Verdict Issuing: Issues a confirmed, false positive, or partial verdict after the verification process.
  • Adversarial Probes: Conducts adversarial probes like WAF bypass and encoding tricks to test the exploit's resilience.
  • Use Case: Imagine a penetration tester who wants to ensure that all vulnerabilities reported by an automated scanner are legitimate.

Quick Start

Use the pentest-verification skill to verify the reported XSS vulnerability in 'app.html'.

Frequently Asked Questions about pentest-verification

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify penetration testing findings to identify false positives?

Verify penetration testing findings by executing actual exploit commands against targets and recording exact output as evidence. The process issues confirmed, false positive, or partial verdicts, reducing manual confirmation effort.

What is the best way to confirm automated scanner vulnerabilities using exploit execution?

Confirm automated scanner vulnerabilities by independently executing the reported exploit commands against vulnerable systems. The verification process records exact output and issues an evidence-based verdict on exploit effectiveness.

How do I test exploit resilience with adversarial probes like WAF bypass and encoding tricks?

Test exploit resilience by conducting adversarial probes such as WAF bypass and encoding tricks during the verification process. These probes evaluate the exploit's resilience and ensure evidence-based severity assessment.

Do I need access to vulnerable systems to run vulnerability assessment verification?

Vulnerability assessment verification requires direct access to the vulnerable systems and relevant exploit commands. This access enables actual exploit execution and exact output recording for evidence-based conclusions.

Can I assess vulnerability severity after confirming a pentest finding?

Assess vulnerability severity after confirming a pentest finding by issuing a verified findings verdict based on exploit execution output. The verdict determines if the finding is confirmed, a false positive, or partial.

Why does exploit verification require exact output recording during penetration testing?

Exploit verification requires exact output recording during penetration testing to provide detailed evidence of the exploit command execution. This evidence supports independent confirmation and ensures evidence-based conclusions.