القائمة
Phase 1 — Reconnaissance. Run nmap, dig, curl, openssl against lab targets. Triggered by arsenal-pipeline-starter when TARGETS_READY is found.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Arsenal offensive security agent — 5-phase attack workflow. When a user asks to attack, hack, pentest, or assess a target, follow this skill. 764 cybersecurity skills, 22 lab targets, real recon tools (nmap, dig, curl, openssl).
Phase 3 — Execution. Run matched exploit playbooks against lab targets. Triggered by arsenal-phase-skill-match when SKILLS_MATCHED is found.
Phase 5 — Notification. Deliver pipeline results via Telegram message. Terminal link for any phase — starter failure, recon no-targets, execution critical findings, or final report.
Phase 4 — Report. Compile execution findings into a structured markdown report. Triggered by arsenal-phase-execute when EXECUTION_COMPLETE is found.
Phase 2 — Skill Selection. Map recon findings to specific exploit skills from the 764-skill catalog. Triggered by arsenal-phase-recon when RECON_COMPLETE is found.
Entry point for the Arsenal automated attack pipeline. Cron-triggered daily scan of lab targets. Chains through recon → skill-match → execute → report → notify.
| name | arsenal-phase-recon |
| description | Phase 1 — Reconnaissance. Run nmap, dig, curl, openssl against lab targets. Triggered by arsenal-pipeline-starter when TARGETS_READY is found. |
Run full reconnaissance against all ready targets. Use the Arsenal CLI recon tools plus direct terminal commands for deeper scanning.
Parse the incoming output for TARGETS_READY line:
TARGETS_READY: name|IP:port|type, name|IP:port|typeFor each Docker target:
arsenal_recon(target="<IP>", operation="all") to gather: subdomain enum, DNS recon, port scan, tech detection, cert scan, HTTP probeFor each Proxmox LXC target:
arsenal_recon(target="<IP>", operation="all")For each target found, compile recon findings:
Output findings in structured format:
RECON_COMPLETE: <target_name>
ports: 80(http), 443(https), 22(ssh), 3306(mysql)
web: Apache/2.4.41, PHP/7.4, WordPress
db: MySQL/8.0 on :3306
notes: Login page at /wp-admin, XML-RPC enabled
RECON_COMPLETE: <next_target>
...
on_complete: