pentest-verification

What problem does it solve?

This Skill independently verifies penetration testing findings, reducing the need for manual confirmation and helping to identify false positives.

Core Features & Use Cases

• Actual Exploit Command Execution: Executes the actual exploit command against the target to verify its effectiveness.
• Exact Output Recording: Provides detailed output as evidence of the exploit command execution.
• Verdict Issuing: Issues a confirmed, false positive, or partial verdict after the verification process.
• Adversarial Probes: Conducts adversarial probes like WAF bypass and encoding tricks to test the exploit's resilience.
• Use Case: Imagine a penetration tester who wants to ensure that all vulnerabilities reported by an automated scanner are legitimate.

Quick Start

Use the pentest-verification skill to verify the reported XSS vulnerability in 'app.html'.