Security Scanning Tools

Scan networks, web apps, wireless, malware, and cloud environments for vulnerabilities.

1|Updated Dec 15, 2025
One-click install
npx skills add https://github.com/jokken79/YuKyuDATA-app1.0v --skill security-scanning-tools-jokken79
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Scanning Tools
Source: https://github.com/jokken79/YuKyuDATA-app1.0v/tree/main/.agent/skills/scanning-tools
Command: npx skills add https://github.com/jokken79/YuKyuDATA-app1.0v --skill security-scanning-tools-jokken79

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies and strengthens an organization's security posture by guiding systematic scanning across networks, web applications, wireless networks, cloud configurations, and compliance controls.

Core Features & Use Cases

  • Network discovery and mapping with Nmap, Masscan, and service enumeration
  • Vulnerability assessment guidance with Nessus, OpenVAS, and credentialed checks
  • Web application security testing guidance with Burp Suite, OWASP ZAP, and Nikto
  • Wireless security testing guidance with Aircrack-ng and Kismet
  • Malware and cloud security scanning with ClamAV, Metasploit, Prowler, ScoutSuite, Lynis, and OpenSCAP
  • Compliance and best practices guidance including CIS benchmarks and PCI-DSS checks

Quick Start

Run a basic network discovery with Nmap against a target to see how the tool enumerates hosts and services

Frequently Asked Questions about Security Scanning Tools

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform network discovery and vulnerability assessment on my infrastructure?

Network discovery and vulnerability assessment involves scanning infrastructure using tools like Nmap for host enumeration and Nessus or OpenVAS for vulnerability detection. Credentialed checks provide deeper visibility into system weaknesses and misconfigurations.

How do I test web application security using Burp Suite and OWASP ZAP?

Web application security testing uses tools like Burp Suite, OWASP ZAP, and Nikto to identify vulnerabilities. These scanners probe web apps for common flaws, misconfigurations, and injection points to assess overall application security posture.

Can I check cloud security configurations and compliance against CIS benchmarks?

Cloud security configuration and compliance validation uses tools like Prowler, ScoutSuite, and OpenSCAP. They assess cloud environments against CIS benchmarks and PCI-DSS requirements to identify misconfigurations and ensure regulatory compliance.

What is the best way to scan wireless networks and detect malware?

Wireless network scanning uses Aircrack-ng and Kismet to evaluate protocol weaknesses, while malware detection relies on ClamAV. Combining these identifies wireless threats and malicious files across Linux-based environments.

Do I need Linux-based tooling and validated authorization to run security scanning?

Linux-based tooling is required to run these security scanners, and validated authorization is mandatory before scanning. Proper authorization ensures legal compliance and prevents unauthorized access during network, web, and cloud assessments.