traditional-finance-intranet-pentest

What problem does it solve?

This Skill addresses the challenge of conducting thorough and secure intranet penetration testing in traditional financial institutions. It provides a structured methodology and specialized sub-agent roles to systematically identify and exploit vulnerabilities while maintaining high safety standards.

Core Features & Use Cases

• Structured Methodology: Follows a comprehensive five-phase framework for penetration testing, including entry consolidation, privilege escalation, lateral movement, post-compromise information collection, and persistence.
• Specialized Sub-Agent Roles: Includes roles like Attack Direction Decision, Backdoor Persistence Hardening, Lateral Movement Discovery, Server Information Collection, Lateral Vulnerability Exploitation, and Domain Penetration & NTLM Utilization.
• Intelligence-Driven: Emphasizes public vulnerability research and intelligence-driven decision-making to inform testing priorities and actions.
• Safety First: Ensures no operations disrupt service stability with a CAI Constitutional Layer that restricts harmful actions.
• Use Case: A penetration tester uses this Skill to identify and exploit vulnerabilities in a financial institution's intranet, ensuring the process adheres to the defined methodology and safety guardrails.

Quick Start

Initialize the skill by copying the directory to your Claude skills location, then invoke it with the trigger word 'financial intranet penetration'.