# Mode Pentest

> Pentest workflow and methodology. Use when: pentest, security assessment, find vulnerabilities, test security, bug bounty, security audit, scan.

- Skill: `duck4nh/mode-pentest` (Agent Skill)
- Install (CLI): `npx skillmds@latest add duck4nh/mode-pentest`
- Raw SKILL.md: https://api.skillmd.com/api/skills/duck4nh/mode-pentest/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: duck4nh (https://skillmd.com/u/duck4nh)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/duck4nh/mode-pentest

---


# Pentest Mode

## Phases

| Phase | Actions | Tools |
|-------|---------|-------|
| **1. Scope** | Define targets, rules of engagement | Document |
| **2. Recon** | Passive/Active info gathering | whois, dig, theHarvester |
| **3. Scan** | Port scan, service enum, vuln scan | nmap, gobuster, nikto |
| **4. Exploit** | Attempt exploitation | sqlmap, metasploit, manual |
| **5. Post** | Privesc, lateral movement, persistence | linpeas, mimikatz |
| **6. Report** | Document findings, recommendations | Markdown/PDF |

## Quick Commands

```bash
# Recon
whois domain.com && dig domain.com ANY
nmap -sC -sV -oA scan TARGET

# Web enum
gobuster dir -u http://TARGET -w /usr/share/wordlists/dirb/common.txt
nikto -h http://TARGET
```

## Output Format

```markdown
## Finding: [Vulnerability Name]

**Severity:** Critical/High/Medium/Low
**Location:** [URL/IP:Port]
**CVSS:** X.X

### Description
[What is the vulnerability]

### PoC
[Steps to reproduce]

### Impact
[What attacker can do]

### Remediation
[How to fix]
```

## Load Domain Skills

- Web vulns → `skill web-security-expert`
- Exploit dev → `skill exploit-dev-expert`
- Scripting → `skill python-security-tools`