redteam-intrusion-hunter

Name: redteam-intrusion-hunter
Availability: InStock
Author: chenchunrun

Automate vulnerability discovery and validation across web and service surfaces.

1|1|Updated Apr 25, 2026

Search Tags:#vulnerability #workflows #scanning #pentest #nuclei #sqlmap #redteam

Ready to run

npx skills add https://github.com/chenchunrun/onyx-soc --skill redteam-intrusion-hunter

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: redteam-intrusion-hunter
Source: https://github.com/chenchunrun/onyx-soc/tree/main/skills/redteam-intrusion-hunter
Command: npx skills add https://github.com/chenchunrun/onyx-soc --skill redteam-intrusion-hunter

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates vulnerability scanning and verification to quickly identify exploitable weaknesses in target environments, reducing manual testing time and human error.

Core Features & Use Cases

Web vulnerability scanning with Nuclei and common templates to detect OWASP-like issues such as XSS, SQLi, SSRF, and misconfigurations.
Service and network scanning using Nmap, masscan, and template-based checks to enumerate services and CVE mappings.
Comprehensive scan workflows that coordinate asset discovery, fingerprinting, and validation, including PoC-style verification when authorized.
Use cases include red-team exercises, security assessments, asset inventory, and vulnerability validation.

Quick Start

Provide the target assets and initiate the automated scan workflow to discover and validate vulnerabilities across web and network services.

Frequently Asked Questions about redteam-intrusion-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate vulnerability scanning and validation for web apps and APIs?▼

Automating vulnerability scanning and validation involves using template-based tools like Nuclei and sqlmap to detect OWASP issues such as XSS, SQLi, and SSRF across web apps and APIs. It coordinates asset discovery, fingerprinting, and PoC-style verification to reduce manual testing time.

Can I use Nuclei and sqlmap to detect OWASP issues like XSS and SQLi?▼

Yes, you can use Nuclei and sqlmap to detect OWASP issues like XSS and SQLi. The workflow applies template-based scanning to identify web vulnerabilities and leverages sqlmap for validation, aggregating results to verify exploitable weaknesses in authorized security testing scenarios.

What is the best way to enumerate services and map CVEs during a red-team exercise?▼

The best way to enumerate services and map CVEs during a red-team exercise is by using Nmap and masscan for network scanning. This approach applies template-based checks to discover services, identify fingerprints, and map known vulnerabilities across the target network perimeter.

Does automated vulnerability discovery support network perimeter assessments with custom templates?▼

Automated vulnerability discovery supports network perimeter assessments by applying configurable templates and workflows. It coordinates asset discovery and fingerprinting using tools like Nmap and masscan, allowing template-based checks to enumerate services and validate findings across targeted network surfaces.

How do I validate vulnerability findings and perform PoC-style verification when authorized?▼

To validate vulnerability findings and perform PoC-style verification when authorized, the workflow aggregates scan results and applies template-based checks. This process confirms exploitable weaknesses discovered by Nuclei and sqlmap, reducing human error during red-team exercises and security assessments.

What are the limitations of template-based scanning for security assessments?▼

Limitations of template-based scanning for security assessments include reliance on existing template coverage for CVEs and misconfigurations. It requires authorized testing scenarios to perform PoC-style verification and may need manual validation to confirm complex exploitable weaknesses discovered during automated workflows.