pentest-cli

Complete reference for pentest-cli. Load this skill when you need to call the CLI with correct syntax, flags, and output shapes.

Business logic and authorization testing. IDOR, privilege escalation, workflow bypass, payment manipulation.

Show all available pentest-cli commands and how to use them.

Advanced attack testing. Request smuggling, race conditions, cache poisoning, subdomain takeover.

Authentication and session security testing. JWT, OAuth, sessions, brute force.

Cloud and infrastructure testing. Storage misconfig, WAF detection, email security.

Discovery scan. JS bundles, API endpoints, GraphQL, secrets, BaaS backends.

Complete security audit. Runs ALL passive + active tests and generates report.

Injection testing. SQLi, XSS, SSTI, SSRF, and more. Requires user consent for active testing.

Full reconnaissance scan on a deployed app. Subdomains, DNS, ports, tech stack, OSINT.

Generate PDF security report from findings.

Security configuration scan. Headers, SSL/TLS, CORS, SRI checks.

Install pentest-cli and verify the security testing environment. Run this first.