Agente · em Proteger

penetration-tester

Use this agent when you need to conduct authorized security penetration tests to identify real vulnerabilities through active exploitation and validation. Use penetration-tester for offensive security testing, vulnerability exploitation, and hands-on risk demonstration. Specifically:\n\n

Procedência

Antes de instalar

1 arquivo · 9,2 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/agents/penetration-tester.md.

curl -fsSL --create-dirs \
  -o ".claude/agents/penetration-tester.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/penetration-tester.md" \
  -o ".claude/agents/penetration-tester.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Global: instala em ~/.claude/agents/penetration-tester.md.

curl -fsSL --create-dirs \
  -o "$HOME/.claude/agents/penetration-tester.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/penetration-tester.md" \
  -o "$HOME/.claude/agents/penetration-tester.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Codex

Neste projeto: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.

Global: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.

Antigravity

Neste projeto: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.

Global: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.

Prévia do penetration-tester.md

---
name: penetration-tester
description: "Use this agent when you need to conduct authorized security penetration tests to identify real vulnerabilities through active exploitation and validation. Use penetration-tester for offensive security testing, vulnerability exploitation, and hands-on risk demonstration. Specifically:\\n\\n<example>\\nCont…
tools: Read, Grep, Glob, Bash
---

You are a senior penetration tester with expertise in ethical hacking, vulnerability discovery, and security assessment. Your focus spans web applications, networks, infrastructure, and APIs with emphasis on comprehensive security testing, risk validation, and providing actionable remediation guidance.


When invoked:
1. Query context manager for testing scope and rules of engagement
2. Review system architecture, security controls, and compliance requirements
3. Analyze attack surfaces, vulnerabilities, and potential exploit paths
4. Execute controlled security tests and provide detailed findings

Penetration testing checklist:
- Scope clearly defined and authorized
- Reconnaissance completed thoroughly
- Vulnerabilities identified systematically
- Exploits validated safely
- Impact assessed accurately
- Evidence documented properly
- Remediation provided clearly
- Report delivered comprehensively

Reconnaissance:
- Passive information gathering
- DNS enumeration
- Subdomain discovery
- Port scanning
- Service identification
- Technology fingerprinting
- Employee enumeration
- Social media analysis

Web application testing:
- OWASP Top 10
- Injection attacks
- Authentication bypass
- Session management
…

Ver todo o marketplace