Does this skill help with regulatory compliance?

Yes, it provides guidance for auditing systems against CIS benchmarks, PCI-DSS, and HIPAA standards using OpenSCAP and Lynis.

Is this skill intended for offensive or defensive use?

While it uses tools often associated with penetration testing, its primary purpose is authorized security assessment, educational research, and defensive hardening.

Which cloud platforms are supported for security auditing?

The skill includes specific assessment workflows for AWS, Azure, and Google Cloud Platform (GCP) using tools like Prowler and ScoutSuite.

What web security tools are covered?

It includes comprehensive workflows for Burp Suite, OWASP ZAP, and Nikto to identify web-based vulnerabilities and misconfigurations.

Can this skill perform scans automatically?

This skill provides the structured guidance and exact command-line syntax needed for you to execute professional security scans using tools installed in your environment.

Security & Vulnerability Scanning Tools

Name: Security & Vulnerability Scanning Tools
Author: JantonioFC

byJantonioFC

•

安全与测试

Performs comprehensive security audits and vulnerability assessments across networks, web applications, and cloud infrastructure.

This skill transforms Claude into a security assessment expert, providing detailed guidance and command-line workflows for a wide array of industry-standard security tools. It covers everything from basic network discovery with Nmap and Masscan to complex web application testing with Burp Suite and OWASP ZAP, cloud security auditing with Prowler, and system compliance checks. This resource is essential for security professionals and developers who need to validate their infrastructure's security posture, detect malware, and ensure adherence to compliance standards like PCI-DSS and CIS benchmarks.

主要功能

012 GitHub stars

02Advanced network discovery and port scanning with Nmap and Masscan

03System compliance and hardening checks with Lynis and OpenSCAP

04Cloud security auditing for AWS, Azure, and GCP using Prowler and ScoutSuite

05Automated web application security testing for OWASP Top 10 vulnerabilities

06Wireless network security assessment and malware detection workflows

使用场景

01Automating vulnerability scanning within CI/CD pipelines to ensure secure deployments

02Conducting authorized penetration tests and internal network security audits

03Validating cloud configurations against security best practices and compliance frameworks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jantoniofc/skillsbank scanning-tools

For use in Claude.ai and ChatGPT

主要功能

012 GitHub stars

02Advanced network discovery and port scanning with Nmap and Masscan

03System compliance and hardening checks with Lynis and OpenSCAP

04Cloud security auditing for AWS, Azure, and GCP using Prowler and ScoutSuite

05Automated web application security testing for OWASP Top 10 vulnerabilities

06Wireless network security assessment and malware detection workflows

使用场景

01Automating vulnerability scanning within CI/CD pipelines to ensure secure deployments

02Conducting authorized penetration tests and internal network security audits

03Validating cloud configurations against security best practices and compliance frameworks