# Pentest

> Network/infrastructure penetration testing with AD attacks

- Skill: `majiayu000/pentest` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/pentest`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/pentest/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/pentest

---


# Penetration Testing

Run authorized network penetration tests including:
- Host discovery and port scanning
- Service enumeration
- Password attacks (spray, brute force)
- Exploitation and initial access
- Post-exploitation and privilege escalation
- Lateral movement
- Active Directory attacks
- Persistence mechanisms

## Required Context
When invoking, provide:
1. **Scope**: IP ranges, domains, restrictions
2. **Authorization**: SOW/LOA reference
3. **Objectives**: Domain admin, specific systems, data access
4. **Constraints**: No DoS, testing windows, etc.

## Tools Used
nmap, masscan, crackmapexec, impacket, bloodhound, evil-winrm, mimikatz, responder, hydra, hashcat

## Example
```
/pentest
Scope: 10.0.0.0/24, domain.local
Authorization: SOW-2024-001
Objective: Achieve domain admin
```