Home / Stacks / Penetration Testing Toolkit
🕵️

Penetration Testing Toolkit

Run authorized security assessments end to end — map the network, scan for known vulnerabilities, test web apps for OWASP Top 10 and injection flaws, and turn every finding into a concrete fix

6 skills · Works with Claude Code, Codex, Cursor & more

⚙️ Engineering
RARE

Nmap Network Recon

Map networks and audit exposure with Nmap — the standard network discovery and security auditing tool. Discover live hosts, enumerate open ports and service versions, fingerprint operating systems, and script custom checks with the Nmap Scripting Engine for authorized assessments.

Community 2.9K
Scanned
security network-security reconnaissance
mkdir -p ~/.claude/skills/nmap-recon && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/nmap-recon/SKILL.md -o ~/.claude/skills/nmap-recon/SKILL.md
⚙️ Engineering
RARE

Nuclei Vulnerability Scanner

Run fast, template-based vulnerability scanning against web apps and infrastructure with Nuclei by ProjectDiscovery. Detect CVEs, misconfigurations, and exposures using thousands of community templates, write custom templates, and integrate severity-ranked results into CI.

Community 3.6K
Scanned
security vulnerability-scanning pentest
mkdir -p ~/.claude/skills/nuclei-scanner && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/nuclei-scanner/SKILL.md -o ~/.claude/skills/nuclei-scanner/SKILL.md
⚙️ Engineering
RARE

OWASP ZAP Web Scanner

Find web application vulnerabilities with OWASP ZAP, the leading open-source DAST scanner. Configure baseline and active scans, write scan policies, catch OWASP Top 10 issues like XSS, SQL injection, and CSRF, and integrate automated security testing into CI/CD.

Community 3.1K
Scanned
security dast web-security
mkdir -p ~/.claude/skills/owasp-zap && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/owasp-zap/SKILL.md -o ~/.claude/skills/owasp-zap/SKILL.md
⚙️ Engineering
RARE

sqlmap SQL Injection Testing

Test your own applications for SQL injection with sqlmap, the standard automated SQLi detection tool. Identify injectable parameters, confirm vulnerabilities, and demonstrate impact during authorized security testing — then get concrete remediation like parameterized queries and input validation.

Community 2.4K
Scanned
security sql-injection pentest
mkdir -p ~/.claude/skills/sqlmap-injection && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/sqlmap/SKILL.md -o ~/.claude/skills/sqlmap-injection/SKILL.md
⚙️ Engineering
RARE

Burp Suite Project Parser

Search and explore Burp Suite project files (.burp) from the command line. Regex-search response headers and bodies, dump proxy history and site map, and extract findings from captured HTTP traffic.

Trail of Bits 1.2K
Scanned
security pentest burpsuite
mkdir -p ~/.claude/skills/community-burpsuite-parser && curl -fsSL https://raw.githubusercontent.com/trailofbits/skills/HEAD/plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md -o ~/.claude/skills/community-burpsuite-parser/SKILL.md
⚙️ Engineering
RARE

Security Audit & OWASP Review

Audit an application for security vulnerabilities across the OWASP Top 10. Reviews code for injection, XSS, broken access control, and insecure config, scans dependencies for CVEs, detects exposed secrets, and returns prioritized findings with severity ratings and concrete fixes.

Community 3.9K
Scanned
security owasp audit
mkdir -p ~/.claude/skills/security-audit && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/security-audit/SKILL.md -o ~/.claude/skills/security-audit/SKILL.md

More Stacks

🤝

Agent Engineering Kit

Engineer reliable AI agents — build on the Claude Agent SDK, coordinate teams with multi-agent patterns, give them memory, and keep them safe with mechanical guardrails and evaluation
🕹️

AI Agent Frameworks

Pick the right framework and ship agents fast — type-safe Python with Pydantic AI, multi-agent orchestration with OpenAI Agents SDK, Agno, and CrewAI, TypeScript graphs with LangGraph.js, and typed workflows with Mastra
🤖

AI Builder Stack

Build AI-powered applications with RAG, multi-agent systems, prompt engineering, and MCP integrations

View all stacks →

Added to wishlist