MCP App StoreMCP App StoreThis skill provides the capability to generate, deliver, and manage reverse shell payloads across a wide variety of platforms (Linux, Windows, Web Apps). It includes a comprehensive fallback chain to ensure successful shell acquisition even in restricted environments.
Activate this skill after confirming Remote Code Execution (RCE) to upgrade a one-shot execution primitive into a persistent, interactive shell session. It is essential for post-exploitation phases of a penetration test.
Specialized security agents or general coding agents operating within a Kali Linux/security-focused environment.
This skill has not been reviewed by our automated audit pipeline yet.
Request CVEs
Generate CVE request packages and disclosure artifacts (MITRE form data, GitHub advisory draft, full vulnerability report, and vendor notification templates) fr
Pentest Report Generator (NullPointer Studio)
Generate a styled, client-ready PDF penetration test report from findings.json using a defined dark theme and structured sections (exec summary, risk dashboard,
TLS/SSL Configuration Audit
Professional cryptographic security audit of TLS/SSL configurations, mapped to PCI DSS 4.0, NIST, and FedRAMP compliance.
Command Injection Methodology
Comprehensive methodology for detecting, exploiting, and bypassing OS command injection, including blind extraction and output-filtering workarounds.
NVD CVE Vulnerability Search
Search the NVD for CVEs by ID or keyword, retrieve CVSS scores, CWE info, affected configurations and remediation references to support audits, incident respons
Catalyst Center Client Operations
Network operations skill for querying Catalyst Center: list and count wired/wireless clients, lookup client details by MAC/IP, analyze band distribution and tim
Kali Docker Pentesting
Provides a Kali Linux Docker container with 200+ penetration-testing tools and guidance for running scans, exploitation, and forensics via direct docker exec co
Acunetix (Membrane) Integration
Integrate and automate Acunetix vulnerability scans, targets, reports and scheduled scans via the Membrane CLI.
Red Team Tools & Methodology
Automate professional red teaming and bug bounty workflows, from subdomain enumeration to vulnerability discovery.
MITRE ATT&CK T1557.001: Name Resolution Poisoning & SMB Relay
Defensive analysis skill for MITRE ATT&CK T1557.001: helps triage, detection engineering, hunting, and incident response for name-resolution poisoning and SMB r
Bug Bounty Methodology
A five-phase bug-hunting workflow and critical-thinking playbook that orients security hunting sessions, maps steps from recon to report, and enforces quality g
