claude

penetration-testing

Penetration testing methodology for authorized assessments: scoping and rules of engagement, attack surface mapping, test planning, and risk-rated vulnerability analysis.

5 on GitHubby Diego Bodartv1.0.0MITupdated 1 month ago
/

Plugin penetration-testing from marketplace libre-secops in Ormus-Solutions/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (1)

  • pentest-methodology

    Reference for PTES phases, the OWASP Testing Guide, and testing patterns by technology and vulnerability class, starting from pre-engagement authorization and rules of engagement. Use when planning or running an authorized penetration test and structuring its report.

Slash commands (2)

  • /penetration-testing:attack-surface

    Map the attack surface of a system you own or are authorized to assess: entry points, trust boundaries, data flows, and high-value targets, from code, configuration, and architecture.

  • /penetration-testing:pentest-plan

    Generate a structured penetration test plan for an authorized engagement: scope, rules of engagement, methodology, test cases, and tooling for the target type.

Subagents (2)

  • pentest-planner

    Use this agent when scoping or planning an authorized penetration test: defining scope and exclusions, rules of engagement, methodology (PTES, OWASP Testing Guide, MASTG, NIST SP 800-115), test cases, and report structure. It confirms written authorization first and returns a scope template instead

  • vuln-researcher

    Use this agent when assessing findings from an authorized assessment: judging real exploitability in the target environment, chaining findings into attack paths, CVSS v3.1 or v4.0 scoring, CVE applicability, and business impact. It produces risk-rated findings with remediation and does not provide w

View source on GitHub

More from Ormus-Solutions/LibreSecOps-Claude-Code

All 33 plugins →

Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

2 skills · 2 commands · 2 agents

5

Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

2 skills · 2 commands · 2 agents

5

Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

2 skills · 2 commands · 2 agents

5

Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

2 skills · 2 commands · 2 agents

5

Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

2 skills · 2 commands · 2 agents

5

Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

2 skills · 2 commands · 2 agents

5

Similar plugins

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

mukul975/Anthropic-Cybersecurity-Skills 36,021

Testing, security, and code quality experts - code review, penetration testing, QA automation

VoltAgent/awesome-claude-code-subagents 26,513

AI-powered bug bounty toolkit — recon, vulnerability hunting, validation gates, and submission-ready reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.

26 skills · 43 commands

awarexone/Agentic-Bug-Hunter 5,846

83-skill bug-hunting & external red-team bundle — 58 hunt-* web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK/iOS), recon/OSINT, reporting & validation gates, Burp MCP integration. Skills auto-load by topic; 15 slash commands.

83 skills · 15 commands

elementalsouls/Claude-BugHunter 5,641

25-skill pentest pack with engagement governance, network/code/dependency scans, OWASP Top 10 mapping, and exec-readable reporting. Heavy-hitter compliant; chain-of-custody attestable.

26 skills · 2 commands

jeremylongshore/tons-of-skills-marketplace 2,917

52 specialist subagents for authorized penetration testing and red team engagements.

0xSteph/pentest-ai-agents 2,439

Maintain penetration-testing?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins33 plugins