# Test Network Services

> Test authorized network services with bounded discovery and protocol-aware validation. Use for hosts, ranges, ports, TLS, banners, versions, authentication, exposure, segmentation, configuration, packet evidence, or vulnerability checks.

- Skill: `gaelic-ghost/test-network-services` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add gaelic-ghost/test-network-services`
- Raw SKILL.md: https://api.skillmd.com/api/skills/gaelic-ghost/test-network-services/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Product & Planning
- Author: gaelic-ghost (https://skillmd.com/u/gaelic-ghost)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/gaelic-ghost/test-network-services

---


# Test Network Services

## Overview

Establish what is actually listening and reachable before making vulnerability claims. Keep discovery, identification, configuration review, authentication tests, and exploit validation as separate authorized levels.

Read [references/network-test-levels.md](references/network-test-levels.md) before selecting tools or scan intensity.

## Workflow

1. Load approved targets/exclusions, source addresses, network path, time/rate limits, credentials, and contacts.
2. Resolve target identity.
   - Record DNS, addresses, cloud/CDN/load-balancer ownership, environment, and routes; stop on third-party or out-of-scope resolution.
3. Discover conservatively.
   - Start with known assets and low-rate reachability/port checks; record tool/version/options, packet source, loss, and filtering.
4. Identify services.
   - Validate protocol, TLS/certificate, banner/version, authentication exposure, and application behavior instead of trusting port numbers or one fingerprint.
5. Assess configuration and exposure.
   - Review unnecessary listeners, network boundary, encryption, weak/default access, anonymous behavior, management interfaces, and segmentation from approved vantage points.
6. Validate vulnerability candidates.
   - Review scanner/template logic and use the smallest protocol-aware proof; route protocol mechanics to `network-protocol-skills`.
7. Stop and clean up.
   - Halt on instability, rate-limit distress, unexpected sensitive data, third parties, or scope drift; close sessions and remove temporary access.

## Output

Return target resolution, discovery coverage, validated services, configuration/exposure observations, vulnerability candidates/validation, negative results, impact, and cleanup.