pentest

name	pentest
description	Penetration testing tools for the CodeAgent — network scanning, service enumeration, and vulnerability checks

Pentest — CodeAgent Tools

Overview

This skill extends the CodeAgent with penetration testing functions. Wraps common security tools (nmap, nikto, dirb, etc.) and provides structured output for automated security assessments.

Setup

# Debian/Ubuntu
sudo apt install nmap nikto dirb whatweb sslscan

CodeAgent Functions

• pentest_portscan(target, ports="1-1000", flags="-sV") — nmap port scan
• pentest_service_enum(target, port) — service version detection
• pentest_web_headers(url) — security header analysis
• pentest_ssl_check(host, port=443) — SSL/TLS configuration audit
• pentest_dir_brute(url, wordlist=None) — directory brute-forcing
• pentest_whatweb(url) — web technology fingerprinting
• pentest_vuln_scan(target, scripts="vuln") — nmap vulnerability scripts

Example

target = "scanme.nmap.org"

# Port scan
print(pentest_portscan(target, ports="22,80,443"))

# Security headers
headers = pentest_web_headers(f"http://{target}")
for h, v in headers.items():
    print(f"  {h}: {v}")

# SSL check
print(pentest_ssl_check(target))

⚠️ Legal Notice

Only use these tools on systems you own or have explicit written permission to test. Unauthorized scanning is illegal in most jurisdictions.