Find tools and command options for an established security testing task. References span 14 categories, including reconnaissance, web testing, password testing, privilege escalation, and tunneling, helping you compare candidates and recall how to use them.
渗透工具速查 — 编码解码、反向Shell、红队工具、漏洞利用、密码攻击、内网工具、凭据窃取、提权、隧道代理、系统命令、信息收集、域渗透、Web工具、Windows工具
Review the instructions the agent will receive before you install.
当已知测试方向，需要选型工具或回忆命令时使用本 Skill。是操作支撑层，不是方法论替代。
使用场景：
边界：本 Skill 帮助选型和回忆工具，不替代方法论。工具选择应跟随当前工作流阶段，而不是反过来。
| 分类 | 覆盖范围 |
|---|---|
| 编码解码 | Base64/URL/Hex/Unicode/HTML 编解码 |
| 反向 Shell | Bash/Python/PowerShell/Netcat/Socat |
| 红队工具 | Cobalt Strike/Metasploit/Covenant |
| 漏洞利用 | Exploit-DB/Searchsploit/自动化框架 |
| 密码攻击 | Hashcat/John/Hydra/Cewl |
| 内网渗透 | Impacket/CrackMapExec/BloodHound |
| 凭据窃取 | Mimikatz/LaZagne/Secretsdump |
| 提权 | LinPEAS/WinPEAS/PowerUp/BeRoot |
| 隧道代理 | Chisel/Ligolo/FRP/Socat/SSH |
| 系统命令 | Linux/Windows 常用命令集 |
| 信息收集 | Nmap/Masscan/Amass/Subfinder |
| 域渗透 | BloodHound/Certipy/Rubeus/Kekeo |
| Web 工具 | SQLmap/Nuclei/FFUF/Burp |
| Windows 渗透 | PowerShell/WMI/WMIC/PowerView |
references/tools-reference-01~14-*.md — 各工具分类详细参考（14 个）references/pentest-tools-reference-skill.md — 工具参考入口references/tools-reference-index.md — 工具参考索引No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Assess AI agents and MCP tools for malicious instructions, tool misuse, permission violations, and data leaks. The skill organizes checks across applications, identity, data, deployment, and models, with references for each risk area.
Test Android app security by operating the app and inspecting network traffic first, then analyzing APK code or observing functions during execution when needed. Verify vulnerabilities and produce a report with screenshots, traffic evidence, and code review findings.
Analyze traffic from Android apps, browser JavaScript, and desktop clients to prepare requests for replay in Burp. Investigate signatures, encryption, and session dependencies when they block replay, and retain working request samples with supporting observations.
Handle encoded strings and cryptographic data with tool-based conversions. Decode layered formats, calculate hashes, encrypt or decrypt with AES and RSA, and inspect JWT tokens, which carry encoded headers and data used in authentication.
Analyze CTF cryptography challenges by identifying the cipher and matching known parameters to possible attacks. It provides formulas, attack parameters, and Python snippets for RSA, AES, elliptic curves, random number generators, classical ciphers, and lattice problems.
Find relevant references for CTF miscellaneous challenges, including restricted execution environments, layered encodings, hidden data in media, and game or virtual machine analysis. It also covers CTFd platform operations and Linux privilege escalation.