con un clic
setup-pentester-tools
初始化渗透测试环境——检查并安装 Playwright 浏览器、Docker Kali 镜像等依赖。
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Menú
初始化渗透测试环境——检查并安装 Playwright 浏览器、Docker Kali 镜像等依赖。
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
实战 SRC / 众测 / Bug bounty 漏洞挖掘 playbook 库(在 pentester 框架中以 playbook 源方式使用,不独立触发工作流)。包含:19 个攻击类 playbook(SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS)、305 个结构化 payload、263 个 WAF/EDR 绕过变体、2887 份 HackerOne 真实 High/Critical 已披露案例、国产 OA / 中间件指纹库。
Query, create, update, and organize reusable penetration testing knowledge under .pentester/knowledge. Manually triggered via /pentester:knowledge-base.
Discover and invoke MCP tools registered in `.pentester/mcp/`. Automatically consulted before each PTES phase. Manually triggered via /pentester:mcp.
Collect current project penetration test data and generate a final report following the PTES report template. Manually triggered via /pentester:gen-report.
Run comprehensive service enumeration on a target including port scanning, version detection, and protocol-specific enumeration. Manually triggered via /pentester:enum-services or auto-suggested after target initialization.
Initialize target directory structure and Docker container for a new penetration test target. Manually triggered via /pentester:init-target or auto-suggested when a new target IP is provided.
| name | setup-pentester-tools |
| description | 初始化渗透测试环境——检查并安装 Playwright 浏览器、Docker Kali 镜像等依赖。 |
初始化渗透测试环境所需的依赖。每项会检查是否已安装,如果没有则询问用户是否要装,可选择跳过。
| # | 检查项 | 修复命令 | 需网络 |
|---|---|---|---|
| 1 | Playwright + Chromium 浏览器 | npm run setup | ✅ |
| 2 | Docker Kali 镜像 kalilinux/kali-rolling | docker pull kalilinux/kali-rolling | ✅ |
| 3 | Pi skill 引用 | mkdir -p .pi && echo '{"skills":["../.pentester/skills"]}' > .pi/settings.json | ❌ |
| 4 | Claude Code skill 引用 | .claude/skills/ → .pentester/skills/ 符号链接 | ❌ |
逐项检查,每项检查到缺失时,询问用户是否初始化。用户同意才执行,拒绝则跳过。
# 检查是否已安装
ls .pentester/skills/playwright-skill/node_modules/.package-lock.json 2>/dev/null
cd .pentester/skills/playwright-skill && npm run setup# 检查镜像是否存在
docker images kalilinux/kali-rolling -q 2>/dev/null
docker pull kalilinux/kali-rolling# 检查 .pi/settings.json 是否存在
test -f .pi/settings.json && grep -q '\.pentester/skills' .pi/settings.json 2>/dev/null
mkdir -p .pi && echo '{"skills":["../.pentester/skills"]}' > .pi/settings.json
(不需要网络,纯配置)# 检查 .claude/skills/ 是否存在且有链接
ls -d .claude/skills/ptes-intelligence 2>/dev/null
.claude/skills/ 目录,为 .pentester/skills/ 下每个 skill 创建符号链接检查完成后输出状态表:
┌──────────────────────┬──────────┐
│ 依赖 │ 状态 │
├──────────────────────┼──────────┤
│ Playwright + Chromium│ ✅ 已安装 │
│ Docker Kali 镜像 │ ✅ 已就绪 │
└──────────────────────┴──────────┘
如某项跳过,状态为 ⏭️ 跳过。用户随时可以重新运行此 skill 补装。