Pentest Commands
Pentest Commands is an agent skill (a SKILL.md file) from zebbern/claude-code-guide. It should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities… It works with Claude Code, Codex and Cursor and has 4,678 GitHub stars across a repository of 4 listed skills.
github.com/zebbern/claude-code-guide/skills/pentest-commands (opens in a new tab)
Data as of from the GitHub API; description from the skill's SKILL.md. Report an error
- Multi-skill repo
- Security
- Maintained
Add this skill
Claude
Claude Code loads skills from ~/.claude/skills/ (all projects) or .claude/skills/ (one project):
git clone --depth 1 https://github.com/zebbern/claude-code-guide.git
cp -r claude-code-guide/skills/pentest-commands ~/.claude/skills/pentest-commands # personal, or .claude/skills in a projectIn the Claude apps, zip the pentest-commands folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/zebbern/claude-code-guide.git
cp -r claude-code-guide/skills/pentest-commands .agents/skills/pentest-commands # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/zebbern/claude-code-guide.git
cp -r claude-code-guide/skills/pentest-commands .cursor/skills/pentest-commands # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references. Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments.
When it triggers
- used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing comman
- "run pentest commands"
- "scan with nmap"
- "use metasploit exploits"
- "crack passwords with hydra or john"
- "scan web vulnerabilities with nikto"
- "enumerate networks"
More skills in zebbern/claude-code-guide
4 skills are listed from this repository.
Similar skills
More security skills
LinkedIn Profile Optimizer
sergebulaev/linkedin-skills
Audit and rewrite a LinkedIn profile end-to-end for 2026: headline, About 7-step, Featured, banner, photo, Experience metrics, Skills, custom URL, recommendations.
Active · last commit Oct 22, 2026
SecurityPythonLean Ctx Review
yvgude/lean-ctx
Review how the lean-ctx ctx* MCP tools performed in the current session and file upstream issues for confirmed problems.
Active · last commit Oct 26, 2026
SecurityRustBacklink Audit
nowork-studio/notfair-plugin
Backlink / off-page SEO audit. Works WITHOUT a paid tool by default — it uses the Google Search Console Links report (your top linking sites, most-linked pages, and anchor text) plus any backlink…
Maintained · last commit Oct 19, 2026
SecurityPythonHunt LLM AI
elementalsouls/Claude-BugHunter
Hunt LLM/AI feature bugs — prompt injection, indirect injection, exfiltration via tool-use/markdown, ASCII smuggling, agentic AI security (OWASP Agentic Apps 2026, ASI01-ASI10).
Active · last commit Oct 25, 2026
SecurityPythonOmh Failure Signal Audit
rlaope/oh-my-hermes
[omh] Hidden or swallowed errors suspected: find swallowed errors, unsafe fallbacks, hidden UI/runtime failures, and missing propagation before they become false green status.
Active · last commit Oct 26, 2026
SecurityPythonCriticism Self Criticism
HughYau/qiushi-skill
批评与自我批评:在工作完成、阶段验收、收到批评或同类错误反复出现时,对成果和过程做诚实、具体、基于事实的审视,输出可执行的改进项,并处理外来批评而不辩解。触发信号包括 review、复盘、审查、"帮我看看有没有问题"、"你确定吗";任务刚开始或只是单步查询时不触发。 English: Criticism and self-criticism.
Maintained · last commit Oct 1, 2026
SecurityJavaScript
How do I install the Pentest Commands skill?
Copy the pentest-commands folder (the one containing SKILL.md) into ~/.claude/skills/ for Claude Code, .agents/skills/ for Codex or .cursor/skills/ for Cursor. The agent picks it up automatically when a task matches its description.
Is the Pentest Commands skill free?
Yes. The repository is open source under the MIT license.
Is Pentest Commands maintained?
The repository's most recent commit was on Oct 24, 2026. appsgit only lists skills from repositories with a commit in the last six months.