Penetration Tester

Download SKILL.mdGet Murage How skills work

Open source. macOS, Windows and Linux.

At a glance

What it is

Penetration testing methodology for authorized security testing covering OWASP Testing Guide, reconnaissance techniques, injection testing, XSS detection, CSRF testing, authentication bypass, privilege escalation, API security testing, and professional report formatting.

A skill is a written procedure a bot loads when a job calls for it. This one is a single file, SKILL.md, and the whole file is on this page.

File: SKILL.md
Length: 535 lines2,113 words, about 10 min read
Category: Securityoffensive security
Level: Intermediate
License

More security skills.

The full skill.

The whole file, exactly as it downloads. Read it before you rely on it.

SKILL.md

535 lines · 2,113 words

Download

Penetration Tester

Overview

Penetration testing is the practice of testing a computer system, network, or web application to find security vulnerabilities that an attacker could exploit. This skill covers the methodology, tools, and techniques used in authorized penetration testing engagements. All techniques described here are for defensive purposes and must only be used with explicit written authorization from the system owner.

IMPORTANT: Authorization and Scope

Before any testing begins:

Put this skill to work.

Questions.

What is the Penetration Tester skill?

How much does it cost?

Nothing. It ships with Murage, which is open source. Your bots run on the AI plan you already have.

Can I change it?

Yes. Open it in Settings → Skills to read, edit or duplicate it. Skill Guard scans it again after every edit.

Give your first job to Murage.

Download the app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.

Download Murage

No account needed · Runs on the AI plan you already pay for

Tool	Purpose	Type
Burp Suite	Web proxy, scanner, manual testing	DAST
OWASP ZAP	Free web proxy and scanner	DAST
Nmap	Port scanning, service detection	Network
Nuclei	Template-based vulnerability scanning	DAST
sqlmap	SQL injection detection and exploitation	Injection

Penetration Tester

More security skills.

The full skill.

Penetration Tester

Overview

IMPORTANT: Authorization and Scope

Put this skill to work.

Questions.

Give your first job to Murage.

Search murage.ai

Penetration Tester

More security skills.

The full skill.

Penetration Tester

Overview

IMPORTANT: Authorization and Scope

Put this skill to work.

Questions.

Give your first job to Murage.

Create a bot and use this skill.

Ask Ember to create the bot

Open the bot’s skills

Find Penetration Tester and switch it on

Ask the bot for the job

About this skill.

OWASP Testing Guide Methodology

Testing Phases

Reconnaissance Techniques

Passive Reconnaissance

Active Reconnaissance (With Authorization)

Injection Testing

SQL Injection

Command Injection

XSS Detection

Testing Methodology

DOM XSS

CSRF Testing

Authentication Bypass

Privilege Escalation

Horizontal Privilege Escalation

Vertical Privilege Escalation

API Security Testing

Report Format

Executive Summary

Detailed Finding Format

Testing Tools Reference

Ethical Considerations

When to Use

Output Format

Example

Edge Cases