redteam-nuclei-scan
nuclei 模板化漏洞扫描:13,000+ 模板覆盖 CVE/暴露面/配置缺陷/默认口令,Nday 与 1day 的主力检测手段(适用:漏洞发现阶段拿到存活资产清单后,做 Nday/1day 批量检测;或已知组件版本想快速确认是否有现成模板)
Skill by xiyan520
Chalk Labs
Need help deploying redteam-nuclei-scan?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/xiyan520-redteam-nuclei-scan
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/redteam-nuclei-scan
What's inside
- Skill name
redteam-nuclei-scan- Description
- nuclei 模板化漏洞扫描:13,000+ 模板覆盖 CVE/暴露面/配置缺陷/默认口令,Nday 与 1day 的主力检测手段(适用:漏洞发现阶段拿到存活资产清单后,做 Nday/1day 批量检测;或已知组件版本想快速确认是否有现成模板)
- License
- unknown
- Metadata
- role: vuln-scan · ported-from: dsh-purge/skills/redteam/nuclei-scan.md · when-to-use: 漏洞发现阶段拿到存活资产清单后,做 Nday/1day 批量检测;或已知组件版本想快速确认是否有现成模板
- Instructions
- 98 lines in SKILL.md · view on GitHub
Before installing
- Instructions read files in your home folder (~/.ssh, ~/.aws…)
Files (1)
- SKILL.md
The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub
More from xiyan520/pi-purge
- 0.556score
redteam-setup
xiyan520
首次使用引导:引导提供 FOFA_KEY 与 VPS 登录方式、验证通道可用、给出降级口径(工具链由工具箱附件按需获取)(适用:用户第一次使用红队模式时;或 redteam_preflight 报出 onboarding.incomplete / 有技能 broken 时;或用户说"环境没配好""工具装一下")
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-browser-automation
xiyan520
无依赖驱动 Chrome/Chromium 抓取 JS 渲染页面、截图、执行 JS、抓接口清单(headless 兜底 + playwright-cli)(适用:需要渲染 SPA / 取 JS 生成的内容 / 截图留证 / 批量抓页面时(Kimi 扩展不可用时首选))
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-fscan-intranet
xiyan520
fscan v2.2.1 内网综合扫描:存活探测、端口/服务识别、28 类弱口令爆破、未授权访问与高危漏洞(MS17-010/SMBGhost)、Redis 利用与 SOCKS5 隧道(适用:进入内网(跳板机/WebShell/socks5 隧道)后快速铺开资产面、找弱口令与未授权、把可达性变成可打点)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-gogo-intranet
xiyan520
gogo v2.15.0 高性能内网扫描引擎:智能/超智能模式、主动+被动指纹、关键信息提取(title/cert/JWT/邮箱/身份证)、nuclei 模板 POC、发包可控低噪声(适用:进入内网后对大网段(/16 /12)快速测绘、要指纹与关键信息、需要尽量少发包不被发现)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-credential-attack
xiyan520
凭据攻击:在线弱口令爆破(hydra)与离线哈希破解(hashcat/john),覆盖 SSH/FTP/RDP/SMB/数据库/Web 后台(适用:发现登录入口(Web 后台/SSH/FTP/RDP/SMB/MySQL/MSSQL/Redis)需要试口令;或已拿到哈希/密文需要还原明文)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-lateral-movement
xiyan520
内网横向与提权:Impacket 套件(PtH/PsExec/WMI/DCOM/Kerberos/凭据转储)+ enum4linux/smbclient 信息枚举(适用:已进内网,需要用已有凭据或哈希横向到其它主机、枚举域环境、dump 凭据、找域控路径)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-router
xiyan520
红队技能路由:按当前阶段(信息收集 / 资产测绘 / 指纹 / 目录爆破 / 漏洞扫描 / 未授权利用 / 凭据 / 隧道 / 横向 / WebShell / 浏览器自动化)指到具体 redteam-* 技能,并给出该阶段的落库动作。拿不准该用哪个技能时先读本条。
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-dir-bruteforce
xiyan520
目录与文件爆破:后台入口、备份文件、配置泄露、源码与版本库暴露(ffuf/feroxbuster/dirsearch/gobuster)(适用:已确认 Web 存活但指纹无直接 Nday 线索;需要找后台入口、备份、配置、源码、上传点等隐藏路径)
SkillAFreshness: AClaude Code +9 - 0.553score
redteam-shell-handler
xiyan520
反弹 Shell 与载荷投递:VPS 上起 MSF/nc/socat 监听接收 shell,或从目标主动拉取载荷落地(适用:需要 RCE/命令执行回连、投递后续载荷、把一次性命令执行变成可交互会话时)
SkillAFreshness: AClaude Code +9 - 0.553score
redteam-chisel-tunnel
xiyan520
chisel 隧道:HTTP/WebSocket 封装的多路复用隧道,最易穿透出网限制与反向代理(适用:suo5 不适用(非 WebShell 入口)、目标只能出 HTTP、需要端口转发或稳定 SOCKS 时)
SkillAFreshness: AClaude Code +9 - 0.553score
redteam-cn-proxy-pool
xiyan520
国内免费 HTTP/SOCKS5 代理池:抓取、验活、按需轮换;只用命令级代理参数,绝不改动本机网络与代理配置(适用:目标有 WAF/封 IP 风险,或需要高频请求(接口爆破、目录扫描、口令喷洒)时)
SkillAFreshness: AClaude Code +9 - 0.553score
redteam-conventions
xiyan520
红队技能族的共享约定:RT_HOME 工具根、占位符替换、rt 落库动词与字段、证据目录、preflight 自检。任何 redteam-* 技能开始前先读本条与 redteam-router。
SkillAFreshness: AClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Oct 22, 2026 (8 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- License unknown
- Repository
- github.com/xiyan520/pi-purge
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from xiyan520
- 0.556score
redteam-fscan-intranet
xiyan520
fscan v2.2.1 内网综合扫描:存活探测、端口/服务识别、28 类弱口令爆破、未授权访问与高危漏洞(MS17-010/SMBGhost)、Redis 利用与 SOCKS5 隧道(适用:进入内网(跳板机/WebShell/socks5 隧道)后快速铺开资产面、找弱口令与未授权、把可达性变成可打点)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-gogo-intranet
xiyan520
gogo v2.15.0 高性能内网扫描引擎:智能/超智能模式、主动+被动指纹、关键信息提取(title/cert/JWT/邮箱/身份证)、nuclei 模板 POC、发包可控低噪声(适用:进入内网后对大网段(/16 /12)快速测绘、要指纹与关键信息、需要尽量少发包不被发现)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-browser-automation
xiyan520
无依赖驱动 Chrome/Chromium 抓取 JS 渲染页面、截图、执行 JS、抓接口清单(headless 兜底 + playwright-cli)(适用:需要渲染 SPA / 取 JS 生成的内容 / 截图留证 / 批量抓页面时(Kimi 扩展不可用时首选))
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-dir-bruteforce
xiyan520
目录与文件爆破:后台入口、备份文件、配置泄露、源码与版本库暴露(ffuf/feroxbuster/dirsearch/gobuster)(适用:已确认 Web 存活但指纹无直接 Nday 线索;需要找后台入口、备份、配置、源码、上传点等隐藏路径)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-credential-attack
xiyan520
凭据攻击:在线弱口令爆破(hydra)与离线哈希破解(hashcat/john),覆盖 SSH/FTP/RDP/SMB/数据库/Web 后台(适用:发现登录入口(Web 后台/SSH/FTP/RDP/SMB/MySQL/MSSQL/Redis)需要试口令;或已拿到哈希/密文需要还原明文)
SkillAFreshness: AClaude Code +9 - 0.556score
redteam-lateral-movement
xiyan520
内网横向与提权:Impacket 套件(PtH/PsExec/WMI/DCOM/Kerberos/凭据转储)+ enum4linux/smbclient 信息枚举(适用:已进内网,需要用已有凭据或哈希横向到其它主机、枚举域环境、dump 凭据、找域控路径)
SkillAFreshness: AClaude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get redteam-nuclei-scan running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
redteam-nuclei-scan skill. Agent Mart. https://agentmart.dev/skills/xiyan520-redteam-nuclei-scan (last updated 2026-10-24)