Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/OpenAisec/Miko --skill pentest-toolsThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Based on SOC occupation classification
Showing SKILL.md
| category | web |
| name | pentest-tools |
| description | 工具路径与配置 - 集中管理所有工具路径、配套文件、MCP工具、字典 |
| when_to_use | 渗透测试全流程，始终加载 |
全部路径使用 {{AITOOLS_DIR}} 占位符，安装时替换为实际工具目录。
| 工具 | 路径 | 用途 |
|---|---|---|
| TscanClient | {{AITOOLS_DIR}}/TscanClient_windows_amd64_v2.9.5/TscanClient_windows_amd64_v2.9.5.exe | 综合扫描（端口/指纹/POC/目录/JS） |
| cdnChecker | {{AITOOLS_DIR}}/cdnChecker_1.0.0_windows_amd64/cdnChecker.exe | CDN检测与绕过 |
| httpx | {{AITOOLS_DIR}}/httpx_1.9.0_windows_amd64/httpx.exe | HTTP探测+指纹+CDN+WAF |
| ffuf | {{AITOOLS_DIR}}/ffuf_2.1.0_windows_amd64/ffuf.exe | 目录/Host碰撞/参数Fuzz |
| enscan | {{AITOOLS_DIR}}/enscan-v2.0.5-windows-amd64/enscan-v2.0.5-windows-amd64.exe | 企业信息收集（仅用户要求） |
cdnChecker：
{{AITOOLS_DIR}}/cdnChecker_1.0.0_windows_amd64/cdn_cname.txt（1081条）{{AITOOLS_DIR}}/cdnChecker_1.0.0_windows_amd64/resolvers.txt（2776个）TscanClient：
{{AITOOLS_DIR}}/TscanClient_windows_amd64_v2.9.5/config.yaml{{AITOOLS_DIR}}/TscanClient_windows_amd64_v2.9.5/JsRule.json（61条正则）| 工具 | 路径 | 用途 |
|---|---|---|
| TideFinger | {{AITOOLS_DIR}}/指纹识别/TideFinger_windows_amd64_v3.2.3.exe | 指纹识别 |
| urlfinder | {{AITOOLS_DIR}}/js分析/urlfinder_0.0.3_windows_amd64/urlfinder.exe | JS API提取 |
| nuclei | {{AITOOLS_DIR}}/漏洞扫描/nuclei/nuclei.exe | 漏洞扫描（仅用户要求） |
| 工具 | 用途 |
|---|---|
| playwright_navigate | 浏览器访问URL |
| playwright_get | HTTP GET（JS文件内容获取必须用） |
| playwright_post | HTTP POST |
| playwright_get_visible_html | 页面渲染后完整HTML |
| playwright_get_visible_text | 页面渲染后文本 |
| playwright_console_logs | 浏览器控制台日志 |
| playwright_evaluate | 浏览器中执行JS |
| playwright_screenshot | 页面截图 |
| playwright_fill | 表单填写 |
| playwright_click | 点击元素 |
本机无预置字典文件。目录扫描用 TscanClient 内置字典（3K），API Fuzz 字典由 AI 按场景动态生成或联网获取。
tmp/<时间戳>/raw/，禁止项目根目录存放