Pentest Expert

This is a solid reference card for penetration testing workflows. You get the standard methodology phases (recon through reporting) with actual command examples for tools like nmap, gobuster, and nuclei. The CVSS severity ratings table is handy for consistent finding classification, and the report structure outline keeps deliverables professional. It's not going to teach you pentesting from scratch, but if you're already doing security assessments and want quick command references or need to remind yourself of the proper enumeration sequence, it works. Think of it as a cheat sheet that keeps you from bouncing between man pages and OWASP docs mid-engagement.

skills.sh installs: 332
GitHub stars: 15
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add duck4nh/antigravity-kit --skill pentest-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Pentest Expert

Methodology

1. Reconnaissance

# Passive
whois target.com
dig target.com ANY +noall +answer
host -t mx target.com
theHarvester -d target.com -b google,bing,linkedin

# Active
nmap -sn 192.168.1.0/24              # Host discovery
nmap -sC -sV -oA scan target         # Service scan
nmap -p- --min-rate=1000 target      # All ports fast

2. Web Enumeration

# Directory brute
gobuster dir -u http://target -w /usr/share/wordlists/dirb/common.txt
feroxbuster -u http://target -w wordlist.txt

# Subdomain enum
subfinder -d target.com
amass enum -d target.com

# Tech detection
whatweb http://target
wappalyzer http://target

3. Vulnerability Scanning

nikto -h http://target
nuclei -u http://target -t cves/
sqlmap -u "http://target/page?id=1" --batch

Severity Rating

Level	CVSS	Examples
Critical	9.0-10.0	RCE, Auth bypass, SQLi with data
High	7.0-8.9	Stored XSS, IDOR with sensitive data
Medium	4.0-6.9	Reflected XSS, Info disclosure
Low	0.1-3.9	Missing headers, version disclosure