---

name: full-pentest description: Complete penetration testing workflow chain. Trigger: full pentest, complete pentest, pentest workflow, 完整渗透, 渗透工作流, full penetration test.

Full Penetration Testing Workflow

Auto-chain without confirmation:

Phase 1 — Recon: skills/network-pentest/scripts/port_scanner.py → scan $HOST skills/network-pentest/scripts/service_enum.py → enumerate services skills/web-pentest/scripts/sqli_scanner.py → test injection points

Phase 2 — Exploit: skills/web-pentest/scripts/auth_bypass.py → bypass authentication skills/web-pentest/scripts/xss_fuzzer.py → test XSS vectors skills/exploit-dev/scripts/shellcode_gen.py → generate payload if needed

Phase 3 — Post-Exploit: skills/post-exploit/scripts/privesc_check.py → check privilege escalation skills/post-exploit/scripts/persist.py → establish persistence

Phase 4 — Exfil: skills/data-exfil/scripts/dns_tunnel.py → covert channel skills/data-exfil/scripts/stego_hide.py → hide extracted data

Phase 5 — Report: Write full engagement report to disk. Chat shows: [OK] → $PATH/pentest-report.md

Output: All findings, exploits, evidence to disk. Chat shows file paths only.