Penetration Testing

penetration-testing

Ethical hacking and security testing methodologies using penetration testing tools, exploit frameworks, and manual security validation. Use when assessing application security posture and identifying exploitable vulnerabilities.

aj-geddes/useful-ai-prompts·712installs351starsTesting & QA

SKILL.md

Full skill instructions

Overview

Systematic security testing to identify, exploit, and document vulnerabilities in applications, networks, and infrastructure through simulated attacks.

When to Use

Pre-production security validation
Annual security assessments
Compliance requirements (PCI-DSS, ISO 27001)
Post-incident security review
Third-party security audits
Red team exercises

Quick Start

Minimal working example:

# pentest_framework.py
import requests
import socket
import subprocess
import json
from typing import List, Dict
from dataclasses import dataclass, asdict
from datetime import datetime

@dataclass
class Finding:
    severity: str
    category: str
    target: str
    vulnerability: str
    evidence: str
    remediation: str
    cvss_score: float

class PenetrationTester:
    def __init__(self, target: str):
        self.target = target
        self.findings: List[Finding] = []

    def test_sql_injection(self, url: str) -> None:
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
Automated Penetration Testing Framework	Automated Penetration Testing Framework
Burp Suite Automation Script	Burp Suite Automation Script

Best Practices

✅ DO

Get written authorization
Define clear scope
Use controlled environments
Document all findings
Follow responsible disclosure
Provide remediation guidance
Verify fixes after patching
Maintain chain of custody

❌ DON'T

Test production without approval
Cause service disruption
Exfiltrate sensitive data
Share findings publicly
Exceed authorized scope
Use destructive payloads

Install skill

Copy and run in your terminal

npx -y skills add https://github.com/aj-geddes/useful-ai-prompts --skill penetration-testing

View on GitHub

penetration-testing

More Testing & QA skills

View all

Testing & QA

test-driven-development

Write tests first, watch them fail, then implement minimal code to pass.

295.4K 244.7K

View

Testing & QA

verification-before-completion

Enforce verification commands before claiming work completion, fixes, or test passes—no success assertions without fresh evidence.

295.4K 230.2K

View

Testing & QA

subagent-driven-development

Dispatch fresh subagents per task with two-stage review (spec compliance, then code quality) in the current session.

295.4K 221.7K

View

Testing & QA

receiving-code-review

Evaluate code review feedback with technical rigor before implementing, avoiding performative agreement and blind implementation.

295.4K 208.8K

View

Testing & QA

writing-skills

Test-driven documentation for creating reusable agent techniques, patterns, and reference guides.

295.4K 205.7K

View

Testing & QA

finishing-a-development-branch

Structured workflow for completing development branches with test verification and merge/PR options.

295.4K 202.3K

View

Testing & QA

playwright-cli

Browser automation with 40+ commands for navigation, interaction, form filling, and web testing.

13.8K 175.3K

View

Testing & QA

webapp-testing

Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.

179.7K 170.6K

View