skills.rest
aivos-xie
aivos-xieCOMMUNITY
Explore all skills by this author →
GitHub

security-toolkit

Analyzes binary files, performs password attacks, and scans web vulnerabilities.

1|Updated Jun 9, 2026
Search Tags:#security testing#penetration testing#web security#reverse engineering#password cracking
One-click install
npx skills add https://github.com/aivos-xie/hermes-skills --skill security-toolkit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-toolkit
Source: https://github.com/aivos-xie/hermes-skills/tree/main/security/security-toolkit
Command: npx skills add https://github.com/aivos-xie/hermes-skills --skill security-toolkit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires hashcat, john, sqlmap, nuclei, ffuf, nmap, nikto, whatweb, sqlmap, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill offers a one-stop solution for various security testing needs, covering reverse engineering, password cracking, and web security, saving users the hassle of navigating multiple tools.

Core Features & Use Cases

  • Reverse Engineering: Comprehensive toolset for reverse engineering binary files and mobile applications.
  • Password Cracking: Features hashcat and John for brute-forcing and identifying secure hashes.
  • Web Security: Tools like sqlmap, nuclei, and ffuf for web vulnerability assessment and penetration testing.

Quick Start

Execute 'nmap -sV -sC target' to perform a port scan on 'target'.

Frequently Asked Questions about security-toolkit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform penetration testing and web vulnerability scanning for a target host?▼

Web vulnerability scanning and penetration testing can be performed using integrated tools like sqlmap, nuclei, and nmap to identify open ports, detect SQL injections, and assess system vulnerabilities.

What is the best way to crack passwords and analyze secure hashes during a security audit?▼

Password cracking during a security audit is best handled by utilizing hashcat and John the Ripper to perform brute-force attacks and identify secure hashes within target files.

Can I use these security testing tools for reverse engineering binary files and mobile applications?▼

Yes, security testing tools support reverse engineering binary files and mobile applications, providing a comprehensive toolset to analyze software during offensive security research.

Does this toolkit require separate installation of security tools like nmap and nuclei?▼

Yes, this security toolkit requires various external dependencies to function, necessitating the separate installation of tools such as hashcat, sqlmap, nuclei, nmap, and ffuf.

How do I start a port scan and service detection on a specific target?▼

To start a port scan and service detection, execute 'nmap -sV -sC target' to perform comprehensive service and script scanning on the specified target host.

Related Skills

AndyAnh174AndyAnh174

Pentest Commands

Reference commands for Nmap, Metasploit, Nikto, SQLMap, Hydra, John the Ripper, Aircrack-ng, and Tshark.

Community
Intermediate
dapperdiversdapperdivers
1

report-generator

Generate structured markdown penetration test reports from JSON security scan findings.

Community
Intermediate
AeonDaveAeonDave
15

dirsearch

Scan web servers for hidden directories and files with recursive scanning.

Community
Intermediate
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced