timsonner/pentest-skills

1

hydra Use for tightly scoped credential validation during authorized pentests. Trigger on approved login checks, low-rate c…

timsonner/pentest-skills

2

2

whatweb Use for web technology fingerprinting during authorized pentests. Trigger on identifying frameworks, middleware, CMS …

timsonner/pentest-skills

2

3

certipy Use for Active Directory Certificate Services review during authorized pentests. Trigger on AD CS enumeration, certif…

timsonner/pentest-skills

1

4

evil-winrm Use for controlled WinRM access validation during authorized internal pentests. Trigger on approved administrative wo…

timsonner/pentest-skills

1

5

gcloud Use for GCP control-plane validation during authorized pentests. Trigger on credentialed Google Cloud review, project…

timsonner/pentest-skills

1

6

gobuster Use for directory, DNS, and virtual host enumeration during authorized pentests. Trigger on hidden content discovery,…

timsonner/pentest-skills

1

7

impacket-ntlmrelayx Use for tightly controlled NTLM relay validation during authorized internal pentests. Trigger on approved relay-path …

timsonner/pentest-skills

1

8

proxychains Use for routing approved tools through a bounded proxy path during authorized pentests. Trigger on approved pivot-pat…

timsonner/pentest-skills

1

9

responder Use for name-resolution weakness assessment during authorized internal pentests. Trigger on LLMNR, NBT-NS, or mDNS ex…

timsonner/pentest-skills

1

10

testssl-sh Use for TLS and certificate posture review during authorized pentests. Trigger on checking protocol support, cipher p…

timsonner/pentest-skills

1

11

tool-selection Select pentest tools by methodology phase, target type, and risk tolerance. Use for deciding whether to use amass, su…

timsonner/pentest-skills

1

12

wpscan Use for WordPress-specific assessment during authorized pentests. Trigger on confirmed WordPress installations, plugi…

timsonner/pentest-skills

1