NeoTheCapt/RedteamAgent

An AI red-team agent for authorized labs and web app pentesting workflows. Turns Claude Code / OpenCode / Codex into a structured recon → test → exploit → report workflow, with containerized tools and resumable state.

122Stars on the repository
54Mods indexed here, across every type
1mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied

auth

01

NeoTheCapt/RedteamAgent

Command

You are the operator managing authentication credentials for the current engagement. The user's arguments specify the auth type and value.

122 1mo ago A 0 tokens

autoengage

02

NeoTheCapt/RedteamAgent

Command

This is a shortcut for /engage --auto. Run the engage workflow in fully autonomous mode.

122 1mo ago C 0 tokens

config

03

NeoTheCapt/RedteamAgent

Command

You are the operator managing runtime parameters for the current engagement.

122 1mo ago A 0 tokens

confirm

04

NeoTheCapt/RedteamAgent

Command

You are the operator switching between auto-confirm and manual-confirm modes.

122 1mo ago A 0 tokens

engage

05

NeoTheCapt/RedteamAgent

Command

You are the operator initiating a new red team engagement. The user has provided a target URL/IP as arguments below this template. Follow these steps exactly: Do not use the task tool or any general subagent for Steps 1-5. Perform initialization directly as the operator.

122 1mo ago B 0 tokens

enumerate

06

NeoTheCapt/RedteamAgent

Command

You are the recon-specialist executing deep enumeration of endpoints and services. This is a manual override command -- the user wants enumeration run with specific focus.

122 1mo ago A 0 tokens

exploit

07

NeoTheCapt/RedteamAgent

Command

You are the exploit-developer crafting and executing exploits against a specific vulnerability. This is a manual override command -- the user wants a targeted exploit executed.

122 1mo ago A 0 tokens

osint

08

NeoTheCapt/RedteamAgent

Command

You are the operator initiating OSINT intelligence gathering on the current engagement.

122 1mo ago A 0 tokens

pivot

09

NeoTheCapt/RedteamAgent

Command

You are the operator analyzing the current engagement state and proposing a strategy change. The user may be stuck, or wants to explore alternative attack vectors.

122 1mo ago A 0 tokens

proxy

10

NeoTheCapt/RedteamAgent

Command

You are the operator managing the mitmproxy interception proxy for the current engagement. The user's arguments specify the action: start or stop.

122 1mo ago A 0 tokens

queue

11

NeoTheCapt/RedteamAgent

Command

You are the operator checking the case queue status for the current engagement.

122 1mo ago A 0 tokens

recon

12

NeoTheCapt/RedteamAgent

Command

You are the recon-specialist executing a full reconnaissance cycle. This is a manual override command -- the user wants recon run (or re-run) with specific focus.

122 1mo ago A 0 tokens

report

13

NeoTheCapt/RedteamAgent

Command

You are the report-writer generating a final structured report for the current engagement.

122 1mo ago A 0 tokens

resume

14

NeoTheCapt/RedteamAgent

Command

You are the operator resuming a previously interrupted engagement. The engagement directory and state files (scope.json, log.md, findings.md, cases.db) contain all the context needed to continue without repeating work.

122 1mo ago A 0 tokens

scan

15

NeoTheCapt/RedteamAgent

Command

You are the recon-specialist executing active port and service scanning. This is a manual override command -- the user wants scanning run with specific focus.

122 1mo ago A 0 tokens

status

16

NeoTheCapt/RedteamAgent

Command

You are the operator providing a status summary of the current engagement.

122 1mo ago A 0 tokens

stop

17

NeoTheCapt/RedteamAgent

Command

You are the operator shutting down all background processes for the current engagement only.

122 1mo ago A 0 tokens

subdomain

18

NeoTheCapt/RedteamAgent

Command

Look for the target domain in this message. It appears near the top as TARGETDOMAIN: or elsewhere in the text. Scan the ENTIRE message for a domain name pattern (e.g., example.com, test.com, example.org).

122 1mo ago A 0 tokens

vuln-analyze

19

NeoTheCapt/RedteamAgent

Command

You are the vulnerability-analyst analyzing discovered endpoints for security vulnerabilities. This is a manual override command -- the user wants vulnerability analysis run with specific focus.

122 1mo ago A 0 tokens