Pentest Commands

A command reference for penetration testing tools when you're running security assessments. It covers the usual suspects: network scanning, exploitation frameworks, password cracking, and web app testing utilities. You'll need a proper pentest distro like Kali and authorized targets to work with. The skill assumes you know basic tool syntax already and just need quick lookup during engagements. It's part of davila7's broader template collection, which has solid traction at 27.7K stars. Honestly, this is more of a cheat sheet than automation, but that's often what you want when you're in the middle of a test and can't remember the exact nmap flags or metasploit module names.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'Pentest Commands' --agent claude-code

Installs into .claude/skills of the current project.

Files

Pentest Commands

Purpose

Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments.

Inputs/Prerequisites

Kali Linux or penetration testing distribution
Target IP addresses with authorization
Wordlists for brute forcing
Network access to target systems
Basic understanding of tool syntax

Outputs/Deliverables

Network enumeration results
Identified vulnerabilities
Exploitation payloads
Cracked credentials
Web vulnerability findings

Core Workflow

1. Nmap Commands

Host Discovery:

# Ping sweep
nmap -sP 192.168.1.0/24

# List IPs without scanning
nmap -sL 192.168.1.0/24

# Ping scan (host discovery)
nmap -sn 192.168.1.0/24

Port Scanning:

# TCP SYN scan (stealth)
nmap -sS 192.168.1.1

# Full TCP connect scan
nmap -sT 192.168.1.1

# UDP scan
nmap -sU 192.168.1.1

# All ports (1-65535)
nmap -p- 192.168.1.1

# Specific ports
nmap -p 22,80,443 192.168.1.1

Service Detection: