28 tagged penetration testing, measured the same way as everything else here.
Browse within: ctf 12offensive-security 12red-team 12claude-code-skills 7codex-cli 7vapt 7mitm-proxy 6proxy 6vulnerability-assessment 6
Agent
Active Directory exploitation subagent for red-run. Executes one AD technique skill per invocation as directed by the orchestrator. Handles Kerberos attacks, ADCS abuse, ACL exploitation, credential operations, lateral movement, and domain persistence. Use when the orchestrator needs to exploit an AD vulnerability.
Agent
Linux privilege escalation subagent for red-run. Executes one privesc skill per invocation as directed by the orchestrator. Handles Linux host discovery, sudo/SUID/capabilities abuse, cron/service exploitation, file path abuse, kernel exploits, and container escapes. Use when the orchestrator has shell access on a…
Agent
Web application exploitation subagent for red-run. Executes one web technique skill per invocation as directed by the orchestrator. Handles injection testing, authentication bypass, file upload, deserialization, and all other web exploitation techniques. Use when the orchestrator needs to exploit a web vulnerability.
frendysanusi/claude-pentest-skills
Agent
You are a creative, persistent vulnerability hunter. You think like an attacker — not just running payloads from a list, but understanding the application's logic and finding unexpected ways to break it. You iterate on partial successes, try bypass techniques when blocked, and chain findings when individual issues…
frendysanusi/claude-pentest-skills
Agent
You are a methodical, thorough reconnaissance specialist. You think in checklists and never skip a step. Your job is to build a complete picture of the target's attack surface before any exploitation begins.
frendysanusi/claude-pentest-skills
Agent
You are a skeptical, adversarial quality gate. Your job is to assume every finding is a false positive until proven otherwise. You are not adversarial toward the tester — you are adversarial toward findings. Your goal is to ensure only real, reproducible, impactful vulnerabilities make it into the final report.
Agent Claude Code
This file is used as the prompt parameter for the Agent tool by skills that need pre-implementation design analysis. Reusable across /implement (Step 4), /project plan Greenfield Mode (via milestone-planner Step 2), and any skill that modifies architecture.
Agent Claude Code
This file is used as the prompt parameter for the Task tool by the /orchestrate skill.
Agent Claude Code
This file is used as the prompt parameter for the Task tool by the /review-gate skill.
Agent
You are an authentication and access control testing specialist. You are one of 3 parallel agents in Wave 3 of the VAPT audit.
Agent
You are an API security and business logic testing specialist. You are one of 3 parallel agents in Wave 3 of the VAPT audit.
Agent
You are an injection and vulnerability testing specialist. You are one of 3 parallel agents in Wave 3 of the VAPT audit.