skills.rest
Laworigin
LaworiginCOMMUNITY
Explore all skills by this author →
GitHub

traditional-finance-intranet-pentest

Automate intranet penetration testing for financial institutions using Python libraries and sub-agent roles.

Updated Jun 26, 2026
Search Tags:#methodology#penetration testing#post-exploitation#lateral movement#vulnerability exploitation#financial institutions#intranet security
One-click install
npx skills add https://github.com/Laworigin/traditional-finance-intranet-pentest --skill traditional-finance-intranet-pentest
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: traditional-finance-intranet-pentest
Source: https://github.com/Laworigin/traditional-finance-intranet-pentest/tree/main
Command: npx skills add https://github.com/Laworigin/traditional-finance-intranet-pentest --skill traditional-finance-intranet-pentest

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of conducting thorough and secure intranet penetration testing in traditional financial institutions. It provides a structured methodology and specialized sub-agent roles to systematically identify and exploit vulnerabilities while maintaining high safety standards.

Core Features & Use Cases

  • Structured Methodology: Follows a comprehensive five-phase framework for penetration testing, including entry consolidation, privilege escalation, lateral movement, post-compromise information collection, and persistence.
  • Specialized Sub-Agent Roles: Includes roles like Attack Direction Decision, Backdoor Persistence Hardening, Lateral Movement Discovery, Server Information Collection, Lateral Vulnerability Exploitation, and Domain Penetration & NTLM Utilization.
  • Intelligence-Driven: Emphasizes public vulnerability research and intelligence-driven decision-making to inform testing priorities and actions.
  • Safety First: Ensures no operations disrupt service stability with a CAI Constitutional Layer that restricts harmful actions.
  • Use Case: A penetration tester uses this Skill to identify and exploit vulnerabilities in a financial institution's intranet, ensuring the process adheres to the defined methodology and safety guardrails.

Quick Start

Initialize the skill by copying the directory to your Claude skills location, then invoke it with the trigger word 'financial intranet penetration'.

Frequently Asked Questions about traditional-finance-intranet-pentest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is intranet penetration testing for financial institutions?▼

Intranet penetration testing for financial institutions is a structured methodology to systematically discover, exploit vulnerabilities, and collect post-exploitation intelligence across internal networks while maintaining strict safety guardrails to prevent service disruption.

How do I perform lateral movement and post-exploitation during an intranet pentest?▼

Perform lateral movement and post-exploitation by following a five-phase framework: entry consolidation, privilege escalation, lateral movement discovery, post-compromise information collection, and persistence, utilizing predefined sub-agent roles for specialized tasks.

Can I use this methodology for penetration testing in traditional financial institutions?▼

Yes, this methodology is specifically designed for traditional financial institutions, using intelligence-driven decision-making and public vulnerability research to inform testing priorities while ensuring no operations disrupt service stability.

What is the best way to ensure safety during intranet vulnerability exploitation?▼

Ensure safety during intranet vulnerability exploitation by implementing a CAI Constitutional Layer that restricts harmful actions, preventing any operations from disrupting service stability during the penetration testing process.

How does domain penetration and NTLM utilization work in intranet security testing?▼

Domain penetration and NTLM utilization works by assigning specialized sub-agent roles to handle lateral vulnerability exploitation and domain penetration tasks, systematically expanding access through the financial institution's internal network.

What are the limitations of automated intranet penetration testing in financial environments?▼

Automated intranet penetration testing is limited by strict safety guardrails that prevent disrupting service stability, requiring intelligence-driven decision-making and public vulnerability research to safely prioritize actions within financial environments.

Related Skills

shadow1ngshadow1ng
14.2k

fscan-agent

Automate network reconnaissance, service fingerprinting, and vulnerability assessment with NDJSON output.

Community
Advanced
hardw00thardw00t
90

network-pentest

Simulate attacker techniques across internal networks and Active Directory environments.

Community
Advanced
ripgraphicsripgraphics

mode-pentest

Executes a structured penetration testing workflow from reconnaissance to reporting.

Community
Advanced
xijunwwxijunww
1

known-product-exploit

Automate identification, exploitation, and post-exploitation of known product vulnerabilities with Nuclei.

Community
Advanced