skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

performing-external-network-penetration-test

Conducts external network penetration tests using PTES methodology from reconnaissance through reporting.

954|172|Updated Mar 13, 2026
Search Tags:#vulnerability assessment#penetration testing#reconnaissance#metasploit#Nmap#PTES#external pentest
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill performing-external-network-penetration-test
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-external-network-penetration-test
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/penetration-testing/performing-external-network-penetration-test
Command: npx skills add https://github.com/xalgord/xalgorix --skill performing-external-network-penetration-test

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Organizations need to identify exploitable vulnerabilities in their internet-facing infrastructure before attackers do, but ad-hoc scanning produces unverified findings and missed attack surface. This Skill provides a structured, phase-by-phase external penetration testing workflow that covers the full engagement lifecycle with reproducible evidence for every finding.

Core Features & Use Cases

  • Full PTES Methodology Coverage: Guides pre-engagement scoping, passive and active reconnaissance, vulnerability analysis, exploitation, post-exploitation, and reporting with concrete commands for each phase.
  • Commonly Missed Attack Surface Checklist: Highlights frequently skipped vectors such as VPN edge appliances, UDP services, default credentials on admin panels, cloud storage exposure, and lockout-safe password spraying.
  • Evidence-Based Reporting: Provides CVSS v3.1 finding classification, report structure templates, and remediation priority matrices tied to timelines.
  • Use Case: A security consultant is engaged to test a client's perimeter. Using this Skill, they enumerate subdomains with subfinder and amass, scan with Nmap and Nuclei, validate CVEs against identified service versions, exploit confirmed weaknesses with Metasploit, and deliver a report where every finding includes proof of exploitation.

Quick Start

Ask the AI to perform an external network penetration test against your authorized target scope following the PTES methodology, starting with reconnaissance and subdomain enumeration.

Frequently Asked Questions about performing-external-network-penetration-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an external network penetration test?▼

Follow the PTES phases: define scope and rules of engagement, run passive and active reconnaissance with subfinder and Nmap, scan for vulnerabilities with Nuclei or Nessus, exploit confirmed weaknesses with Metasploit, then document findings with CVSS scores and remediation steps.

What tools are used for external pentest reconnaissance?▼

Subdomain enumeration uses subfinder and amass, DNS and WHOIS lookups use dig and whois, certificate transparency logs are queried via crt.sh, and port scanning uses Nmap with SYN, UDP, and service version detection flags.

What authorization is needed before penetration testing?▼

You need a signed Rules of Engagement document, defined scope with IP ranges and exclusions, an MSA, SOW, NDA, and a get-out-of-jail letter. Testing windows and emergency contacts should be coordinated with the SOC before any scanning begins.

What attack surface is most often missed in external pentests?▼

Commonly missed areas include VPN and remote-access edge appliances, UDP services like SNMP, default credentials on admin panels such as Jenkins and phpMyAdmin, cloud storage buckets, and staging hosts found only through certificate transparency logs.

How do I avoid account lockouts during password spraying?▼

Confirm the organization's lockout threshold before spraying against OWA or VPN endpoints, use a small number of common passwords across many accounts rather than brute-forcing single accounts, and space attempts across the approved testing window.

Related Skills

Explore More Software Engineering Skills→
davila7davila7
30.5k

Ethical Hacking Methodology

Guides authorized penetration testing from reconnaissance through exploitation to professional reporting.

Community
Intermediate
starwreckntxstarwreckntx

Vulnerability Management Agent

Track vulnerabilities across assets using CVE/CVSS standards and CVSS scoring.

Community
Basic
dralgorhythmdralgorhythm
111

defense-in-depth

Design and implement defense-in-depth security across five layers.

Community
Advanced
BagelHoleBagelHole
46

vulnerability-scanning

Scan systems and dependencies for CVEs using Nessus, OpenVAS, and Qualys.

Community
Intermediate