Security Scanning Tools

Security Scanning Tools Purpose Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories. Prerequisites Required Environment - Linux-based system (Kali Linux recommended) - Network access to target systems - Proper authorization for scanning activities Required Knowledge - Basic networking concepts (TCP/IP, ports, protocols) - Understanding of common vulnerabilities - Familiarity with c…

/path/to/scan\n\n# Output to log\nclamscan -r -l scan.log /path/to/scan\n```\n\n#### Metasploit Vulnerability Validation\n\nValidate vulnerabilities with exploitation:\n\n```bash\n# Start Metasploit\nmsfconsole\n\n# Database setup\nmsfdb init\ndb_status\n\n# Import Nmap results\ndb_import /path/to/nmap_scan.xml\n\n# Vulnerability scanning\nuse auxiliary/scanner/smb/smb_ms17_010\nset RHOSTS 192.168.1.0/24\nrun\n\n# Auto exploitation\nvulns # View vulnerabilities\nanalyze # Suggest exploits\n```\n\n### Phase 6: Cloud Security Scanning\n\n#### Prowler (AWS)\n\nAWS security assessment:\n\n```bash\n# Install Prowler\npip install prowler\n\n# Basic scan\nprowler aws\n\n# Specific checks\nprowler aws -c iam s3 ec2\n\n# Compliance framework\nprowler aws --compliance cis_aws\n\n# Output formats\nprowler aws -M html json csv\n\n# Specific region\nprowler aws -f us-east-1\n\n# Assume role\nprowler aws -R arn:aws:iam::123456789012:role/ProwlerRole\n```\n\n#### ScoutSuite (Multi-cloud)\n\nMulti-cloud security auditing:\n\n```bash\n# Install ScoutSuite\npip install scoutsuite\n\n# AWS scan\nscout aws\n\n# Azure scan\nscout azure --cli\n\n# GCP scan\nscout gcp --user-account\n\n# Generate report\nscout aws --report-dir ./reports\n```\n\n### Phase 7: Compliance Scanning\n\n#### Lynis\n\nSecurity auditing for Unix/Linux:\n\n```bash\n# Run audit\nsudo lynis audit system\n\n# Quick scan\nsudo lynis audit system --quick\n\n# Specific profile\nsudo lynis audit system --profile server\n\n# Output report\nsudo lynis audit system --report-file /tmp/lynis-report.dat\n\n# Check specific section\nsudo lynis show profiles\nsudo lynis audit system --tests-from-group malware\n```\n\n#### OpenSCAP\n\nSecurity compliance scanning:\n\n```bash\n# List available profiles\noscap info /usr/share/xml/scap/ssg/content/ssg-\u003cdistro>-ds.xml\n\n# Run scan with profile\noscap xccdf eval --profile xccdf_org.ssgproject.content_profile_pci-dss \\\n --report report.html \\\n /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml\n\n# Generate fix script\noscap xccdf generate fix \\\n --profile xccdf_org.ssgproject.content_profile_pci-dss \\\n --output remediation.sh \\\n /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml\n```\n\n### Phase 8: Scanning Methodology\n\nStructured scanning approach:\n\n1. **Planning**\n - Define scope and objectives\n - Obtain proper authorization\n - Select appropriate tools\n\n2. **Discovery**\n - Host discovery (Nmap ping sweep)\n - Port scanning\n - Service enumeration\n\n3. **Vulnerability Assessment**\n - Automated scanning (Nessus/OpenVAS)\n - Web application scanning (Burp/ZAP)\n - Manual verification\n\n4. **Analysis**\n - Correlate findings\n - Eliminate false positives\n - Prioritize by severity\n\n5. **Reporting**\n - Document findings\n - Provide remediation guidance\n - Executive summary\n\n### Phase 9: Tool Selection Guide\n\nChoose the right tool for each scenario:\n\n| Scenario | Recommended Tools |\n|----------|-------------------|\n| Network Discovery | Nmap, Masscan |\n| Vulnerability Assessment | Nessus, OpenVAS |\n| Web App Testing | Burp Suite, ZAP, Nikto |\n| Wireless Security | Aircrack-ng, Kismet |\n| Malware Detection | ClamAV, YARA |\n| Cloud Security | Prowler, ScoutSuite |\n| Compliance | Lynis, OpenSCAP |\n| Protocol Analysis | Wireshark, tcpdump |\n\n### Phase 10: Reporting and Documentation\n\nGenerate professional reports:\n\n```bash\n# Nmap XML to HTML\nxsltproc nmap-output.xml -o report.html\n\n# OpenVAS report export\ngvm-cli socket --xml '\u003cget_reports report_id=\"\u003cid>\" format_id=\"\u003cpdf_format>\"/>'\n\n# Combine multiple scan results\n# Use tools like Faraday, Dradis, or custom scripts\n\n# Executive summary template:\n# 1. Scope and methodology\n# 2. Key findings summary\n# 3. Risk distribution chart\n# 4. Critical vulnerabilities\n# 5. Remediation recommendations\n# 6. Detailed technical findings\n```\n\n## Quick Reference\n\n### Nmap Cheat Sheet\n\n| Scan Type | Command |\n|-----------|---------|\n| Ping Scan | `nmap -sn \u003ctarget>` |\n| Quick Scan | `nmap -T4 -F \u003ctarget>` |\n| Full Scan | `nmap -p- \u003ctarget>` |\n| Service Scan | `nmap -sV \u003ctarget>` |\n| OS Detection | `nmap -O \u003ctarget>` |\n| Aggressive | `nmap -A \u003ctarget>` |\n| Vuln Scripts | `nmap --script=vuln \u003ctarget>` |\n| Stealth Scan | `nmap -sS -T2 \u003ctarget>` |\n\n### Common Ports Reference\n\n| Port | Service |\n|------|---------|\n| 21 | FTP |\n| 22 | SSH |\n| 23 | Telnet |\n| 25 | SMTP |\n| 53 | DNS |\n| 80 | HTTP |\n| 443 | HTTPS |\n| 445 | SMB |\n| 3306 | MySQL |\n| 3389 | RDP |\n\n## Constraints and Limitations\n\n### Legal Considerations\n- Always obtain written authorization\n- Respect scope boundaries\n- Follow responsible disclosure practices\n- Comply with local laws and regulations\n\n### Technical Limitations\n- Some scans may trigger IDS/IPS alerts\n- Heavy scanning can impact network performance\n- False positives require manual verification\n- Encrypted traffic may limit analysis\n\n### Best Practices\n- Start with non-intrusive scans\n- Gradually increase scan intensity\n- Document all scanning activities\n- Validate findings before reporting\n\n## Troubleshooting\n\n### Scan Not Detecting Hosts\n\n**Solutions:**\n1. Try different discovery methods: `nmap -Pn` or `nmap -sn -PS/PA/PU`\n2. Check firewall rules blocking ICMP\n3. Use TCP SYN scan: `nmap -PS22,80,443`\n4. Verify network connectivity\n\n### Slow Scan Performance\n\n**Solutions:**\n1. Increase timing: `nmap -T4` or `-T5`\n2. Reduce port range: `--top-ports 100`\n3. Use Masscan for initial discovery\n4. Disable DNS resolution: `-n`\n\n### Web Scanner Missing Vulnerabilities\n\n**Solutions:**\n1. Authenticate to access protected areas\n2. Increase crawl depth\n3. Add custom injection points\n4. Use multiple tools for coverage\n5. Perform manual testing\n---","attachment_filenames":[],"attachments":[],"content_json":{"type":"doc","content":[{"type":"heading","attrs":{"level":1},"content":[{"text":"Security Scanning Tools","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Purpose","type":"text"}]},{"type":"paragraph","content":[{"text":"Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Required Environment","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Linux-based system (Kali Linux recommended)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Network access to target systems","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Proper authorization for scanning activities","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Required Knowledge","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Basic networking concepts (TCP/IP, ports, protocols)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Understanding of common vulnerabilities","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Familiarity with command-line interfaces","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Outputs and Deliverables","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Network Discovery Reports","type":"text","marks":[{"type":"strong"}]},{"text":" - Identified hosts, ports, and services","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Vulnerability Assessment Reports","type":"text","marks":[{"type":"strong"}]},{"text":" - CVEs, misconfigurations, risk ratings","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Web Application Security Reports","type":"text","marks":[{"type":"strong"}]},{"text":" - OWASP Top 10 findings","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Compliance Reports","type":"text","marks":[{"type":"strong"}]},{"text":" - CIS benchmarks, PCI-DSS, HIPAA checks","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Core Workflow","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 1: Network Scanning Tools","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Nmap (Network Mapper)","type":"text"}]},{"type":"paragraph","content":[{"text":"Primary tool for network discovery and security auditing:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Host discovery\nnmap -sn 192.168.1.0/24 # Ping scan (no port scan)\nnmap -sL 192.168.1.0/24 # List scan (DNS resolution)\nnmap -Pn 192.168.1.100 # Skip host discovery\n\n# Port scanning techniques\nnmap -sS 192.168.1.100 # TCP SYN scan (stealth)\nnmap -sT 192.168.1.100 # TCP connect scan\nnmap -sU 192.168.1.100 # UDP scan\nnmap -sA 192.168.1.100 # ACK scan (firewall detection)\n\n# Port specification\nnmap -p 80,443 192.168.1.100 # Specific ports\nnmap -p- 192.168.1.100 # All 65535 ports\nnmap -p 1-1000 192.168.1.100 # Port range\nnmap --top-ports 100 192.168.1.100 # Top 100 common ports\n\n# Service and OS detection\nnmap -sV 192.168.1.100 # Service version detection\nnmap -O 192.168.1.100 # OS detection\nnmap -A 192.168.1.100 # Aggressive (OS, version, scripts)\n\n# Timing and performance\nnmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)\nnmap -T4 192.168.1.100 # Aggressive (faster)\nnmap -T5 192.168.1.100 # Insane (fastest)\n\n# NSE Scripts\nnmap --script=vuln 192.168.1.100 # Vulnerability scripts\nnmap --script=http-enum 192.168.1.100 # Web enumeration\nnmap --script=smb-vuln* 192.168.1.100 # SMB vulnerabilities\nnmap --script=default 192.168.1.100 # Default script set\n\n# Output formats\nnmap -oN scan.txt 192.168.1.100 # Normal output\nnmap -oX scan.xml 192.168.1.100 # XML output\nnmap -oG scan.gnmap 192.168.1.100 # Grepable output\nnmap -oA scan 192.168.1.100 # All formats","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Masscan","type":"text"}]},{"type":"paragraph","content":[{"text":"High-speed port scanning for large networks:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Basic scanning\nmasscan -p80 192.168.1.0/24 --rate=1000\nmasscan -p80,443,8080 192.168.1.0/24 --rate=10000\n\n# Full port range\nmasscan -p0-65535 192.168.1.0/24 --rate=5000\n\n# Large-scale scanning\nmasscan 0.0.0.0/0 -p443 --rate=100000 --excludefile exclude.txt\n\n# Output formats\nmasscan -p80 192.168.1.0/24 -oG results.gnmap\nmasscan -p80 192.168.1.0/24 -oJ results.json\nmasscan -p80 192.168.1.0/24 -oX results.xml\n\n# Banner grabbing\nmasscan -p80 192.168.1.0/24 --banners","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 2: Vulnerability Scanning Tools","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Nessus","type":"text"}]},{"type":"paragraph","content":[{"text":"Enterprise-grade vulnerability assessment:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Start Nessus service\nsudo systemctl start nessusd\n\n# Access web interface\n# https://localhost:8834\n\n# Command-line (nessuscli)\nnessuscli scan --create --name \"Internal Scan\" --targets 192.168.1.0/24\nnessuscli scan --list\nnessuscli scan --launch \u003cscan_id>\nnessuscli report --format pdf --output report.pdf \u003cscan_id>","type":"text"}]},{"type":"paragraph","content":[{"text":"Key Nessus features:","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Comprehensive CVE detection","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Compliance checks (PCI-DSS, HIPAA, CIS)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Custom scan templates","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Credentialed scanning for deeper analysis","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Regular plugin updates","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"OpenVAS (Greenbone)","type":"text"}]},{"type":"paragraph","content":[{"text":"Open-source vulnerability scanning:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Install OpenVAS\nsudo apt install openvas\nsudo gvm-setup\n\n# Start services\nsudo gvm-start\n\n# Access web interface (Greenbone Security Assistant)\n# https://localhost:9392\n\n# Command-line operations\ngvm-cli socket --xml \"\u003cget_version/>\"\ngvm-cli socket --xml \"\u003cget_tasks/>\"\n\n# Create and run scan\ngvm-cli socket --xml '\n\u003ccreate_target>\n \u003cname>Test Target\u003c/name>\n \u003chosts>192.168.1.0/24\u003c/hosts>\n\u003c/create_target>'","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 3: Web Application Scanning Tools","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Burp Suite","type":"text"}]},{"type":"paragraph","content":[{"text":"Comprehensive web application testing:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":""},"content":[{"text":"# Proxy configuration\n1. Set browser proxy to 127.0.0.1:8080\n2. Import Burp CA certificate for HTTPS\n3. Add target to scope\n\n# Key modules:\n- Proxy: Intercept and modify requests\n- Spider: Crawl web applications\n- Scanner: Automated vulnerability detection\n- Intruder: Automated attacks (fuzzing, brute-force)\n- Repeater: Manual request manipulation\n- Decoder: Encode/decode data\n- Comparer: Compare responses","type":"text"}]},{"type":"paragraph","content":[{"text":"Core testing workflow:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Configure proxy and scope","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Spider the application","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Analyze sitemap","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Run active scanner","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Manual testing with Repeater/Intruder","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Review findings and generate report","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"OWASP ZAP","type":"text"}]},{"type":"paragraph","content":[{"text":"Open-source web application scanner:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Start ZAP\nzaproxy\n\n# Automated scan from CLI\nzap-cli quick-scan https://target.com\n\n# Full scan\nzap-cli spider https://target.com\nzap-cli active-scan https://target.com\n\n# Generate report\nzap-cli report -o report.html -f html\n\n# API mode\nzap.sh -daemon -port 8080 -config api.key=\u003cyour_key>","type":"text"}]},{"type":"paragraph","content":[{"text":"ZAP automation:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Docker-based scanning\ndocker run -t owasp/zap2docker-stable zap-full-scan.py \\\n -t https://target.com -r report.html\n\n# Baseline scan (passive only)\ndocker run -t owasp/zap2docker-stable zap-baseline.py \\\n -t https://target.com -r report.html","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Nikto","type":"text"}]},{"type":"paragraph","content":[{"text":"Web server vulnerability scanner:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Basic scan\nnikto -h https://target.com\n\n# Scan specific port\nnikto -h target.com -p 8080\n\n# Scan with SSL\nnikto -h target.com -ssl\n\n# Multiple targets\nnikto -h targets.txt\n\n# Output formats\nnikto -h target.com -o report.html -Format html\nnikto -h target.com -o report.xml -Format xml\nnikto -h target.com -o report.csv -Format csv\n\n# Tuning options\nnikto -h target.com -Tuning 123456789 # All tests\nnikto -h target.com -Tuning x # Exclude specific tests","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 4: Wireless Scanning Tools","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Aircrack-ng Suite","type":"text"}]},{"type":"paragraph","content":[{"text":"Wireless network penetration testing:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Check wireless interface\nairmon-ng\n\n# Enable monitor mode\nsudo airmon-ng start wlan0\n\n# Scan for networks\nsudo airodump-ng wlan0mon\n\n# Capture specific network\nsudo airodump-ng -c \u003cchannel> --bssid \u003ctarget_bssid> -w capture wlan0mon\n\n# Deauthentication attack\nsudo aireplay-ng -0 10 -a \u003cbssid> wlan0mon\n\n# Crack WPA handshake\naircrack-ng -w wordlist.txt -b \u003cbssid> capture*.cap\n\n# Crack WEP\naircrack-ng -b \u003cbssid> capture*.cap","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Kismet","type":"text"}]},{"type":"paragraph","content":[{"text":"Passive wireless detection:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Start Kismet\nkismet\n\n# Specify interface\nkismet -c wlan0\n\n# Access web interface\n# http://localhost:2501\n\n# Detect hidden networks\n# Kismet passively collects all beacon frames\n# including those from hidden SSIDs","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 5: Malware and Exploit Scanning","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"ClamAV","type":"text"}]},{"type":"paragraph","content":[{"text":"Open-source antivirus scanning:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Update virus definitions\nsudo freshclam\n\n# Scan directory\nclamscan -r /path/to/scan\n\n# Scan with verbose output\nclamscan -r -v /path/to/scan\n\n# Move infected files\nclamscan -r --move=/quarantine /path/to/scan\n\n# Remove infected files\nclamscan -r --remove /path/to/scan\n\n# Scan specific file types\nclamscan -r --include='\\.exe$|\\.dll

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.

/path/to/scan\n\n# Output to log\nclamscan -r -l scan.log /path/to/scan","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Metasploit Vulnerability Validation","type":"text"}]},{"type":"paragraph","content":[{"text":"Validate vulnerabilities with exploitation:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Start Metasploit\nmsfconsole\n\n# Database setup\nmsfdb init\ndb_status\n\n# Import Nmap results\ndb_import /path/to/nmap_scan.xml\n\n# Vulnerability scanning\nuse auxiliary/scanner/smb/smb_ms17_010\nset RHOSTS 192.168.1.0/24\nrun\n\n# Auto exploitation\nvulns # View vulnerabilities\nanalyze # Suggest exploits","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 6: Cloud Security Scanning","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Prowler (AWS)","type":"text"}]},{"type":"paragraph","content":[{"text":"AWS security assessment:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Install Prowler\npip install prowler\n\n# Basic scan\nprowler aws\n\n# Specific checks\nprowler aws -c iam s3 ec2\n\n# Compliance framework\nprowler aws --compliance cis_aws\n\n# Output formats\nprowler aws -M html json csv\n\n# Specific region\nprowler aws -f us-east-1\n\n# Assume role\nprowler aws -R arn:aws:iam::123456789012:role/ProwlerRole","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"ScoutSuite (Multi-cloud)","type":"text"}]},{"type":"paragraph","content":[{"text":"Multi-cloud security auditing:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Install ScoutSuite\npip install scoutsuite\n\n# AWS scan\nscout aws\n\n# Azure scan\nscout azure --cli\n\n# GCP scan\nscout gcp --user-account\n\n# Generate report\nscout aws --report-dir ./reports","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 7: Compliance Scanning","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Lynis","type":"text"}]},{"type":"paragraph","content":[{"text":"Security auditing for Unix/Linux:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Run audit\nsudo lynis audit system\n\n# Quick scan\nsudo lynis audit system --quick\n\n# Specific profile\nsudo lynis audit system --profile server\n\n# Output report\nsudo lynis audit system --report-file /tmp/lynis-report.dat\n\n# Check specific section\nsudo lynis show profiles\nsudo lynis audit system --tests-from-group malware","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"OpenSCAP","type":"text"}]},{"type":"paragraph","content":[{"text":"Security compliance scanning:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# List available profiles\noscap info /usr/share/xml/scap/ssg/content/ssg-\u003cdistro>-ds.xml\n\n# Run scan with profile\noscap xccdf eval --profile xccdf_org.ssgproject.content_profile_pci-dss \\\n --report report.html \\\n /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml\n\n# Generate fix script\noscap xccdf generate fix \\\n --profile xccdf_org.ssgproject.content_profile_pci-dss \\\n --output remediation.sh \\\n /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 8: Scanning Methodology","type":"text"}]},{"type":"paragraph","content":[{"text":"Structured scanning approach:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Planning","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Define scope and objectives","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Obtain proper authorization","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Select appropriate tools","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Discovery","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Host discovery (Nmap ping sweep)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Port scanning","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Service enumeration","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Vulnerability Assessment","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Automated scanning (Nessus/OpenVAS)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Web application scanning (Burp/ZAP)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Manual verification","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Analysis","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Correlate findings","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Eliminate false positives","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Prioritize by severity","type":"text"}]}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Reporting","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Document findings","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Provide remediation guidance","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Executive summary","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 9: Tool Selection Guide","type":"text"}]},{"type":"paragraph","content":[{"text":"Choose the right tool for each scenario:","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Scenario","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Recommended Tools","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Network Discovery","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Nmap, Masscan","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Vulnerability Assessment","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Nessus, OpenVAS","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Web App Testing","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Burp Suite, ZAP, Nikto","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Wireless Security","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Aircrack-ng, Kismet","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Malware Detection","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"ClamAV, YARA","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Cloud Security","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Prowler, ScoutSuite","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Compliance","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Lynis, OpenSCAP","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Protocol Analysis","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Wireshark, tcpdump","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Phase 10: Reporting and Documentation","type":"text"}]},{"type":"paragraph","content":[{"text":"Generate professional reports:","type":"text"}]},{"type":"code_block","attrs":{"wrap":false,"language":"bash"},"content":[{"text":"# Nmap XML to HTML\nxsltproc nmap-output.xml -o report.html\n\n# OpenVAS report export\ngvm-cli socket --xml '\u003cget_reports report_id=\"\u003cid>\" format_id=\"\u003cpdf_format>\"/>'\n\n# Combine multiple scan results\n# Use tools like Faraday, Dradis, or custom scripts\n\n# Executive summary template:\n# 1. Scope and methodology\n# 2. Key findings summary\n# 3. Risk distribution chart\n# 4. Critical vulnerabilities\n# 5. Remediation recommendations\n# 6. Detailed technical findings","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Quick Reference","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Nmap Cheat Sheet","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Scan Type","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Command","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Ping Scan","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap -sn \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Quick Scan","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap -T4 -F \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Full Scan","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap -p- \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Service Scan","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap -sV \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"OS Detection","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap -O \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Aggressive","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap -A \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Vuln Scripts","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap --script=vuln \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Stealth Scan","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"nmap -sS -T2 \u003ctarget>","type":"text","marks":[{"type":"code_inline"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Common Ports Reference","type":"text"}]},{"type":"table","attrs":{"layout":null},"content":[{"type":"tr","content":[{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Port","type":"text"}]}]},{"type":"th","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Service","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"21","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"FTP","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"22","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"SSH","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"23","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"Telnet","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"25","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"SMTP","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"53","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"DNS","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"80","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HTTP","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"443","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"HTTPS","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"445","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"SMB","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"3306","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"MySQL","type":"text"}]}]}]},{"type":"tr","content":[{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"3389","type":"text"}]}]},{"type":"td","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"alignment":""},"content":[{"type":"paragraph","content":[{"text":"RDP","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Constraints and Limitations","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Legal Considerations","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Always obtain written authorization","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Respect scope boundaries","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Follow responsible disclosure practices","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Comply with local laws and regulations","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Technical Limitations","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Some scans may trigger IDS/IPS alerts","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Heavy scanning can impact network performance","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"False positives require manual verification","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Encrypted traffic may limit analysis","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Best Practices","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Start with non-intrusive scans","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Gradually increase scan intensity","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Document all scanning activities","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Validate findings before reporting","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Troubleshooting","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Scan Not Detecting Hosts","type":"text"}]},{"type":"paragraph","content":[{"text":"Solutions:","type":"text","marks":[{"type":"strong"}]}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Try different discovery methods: ","type":"text"},{"text":"nmap -Pn","type":"text","marks":[{"type":"code_inline"}]},{"text":" or ","type":"text"},{"text":"nmap -sn -PS/PA/PU","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Check firewall rules blocking ICMP","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Use TCP SYN scan: ","type":"text"},{"text":"nmap -PS22,80,443","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Verify network connectivity","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Slow Scan Performance","type":"text"}]},{"type":"paragraph","content":[{"text":"Solutions:","type":"text","marks":[{"type":"strong"}]}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Increase timing: ","type":"text"},{"text":"nmap -T4","type":"text","marks":[{"type":"code_inline"}]},{"text":" or ","type":"text"},{"text":"-T5","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Reduce port range: ","type":"text"},{"text":"--top-ports 100","type":"text","marks":[{"type":"code_inline"}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Use Masscan for initial discovery","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Disable DNS resolution: ","type":"text"},{"text":"-n","type":"text","marks":[{"type":"code_inline"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Web Scanner Missing Vulnerabilities","type":"text"}]},{"type":"paragraph","content":[{"text":"Solutions:","type":"text","marks":[{"type":"strong"}]}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Authenticate to access protected areas","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Increase crawl depth","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Add custom injection points","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Use multiple tools for coverage","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Perform manual testing","type":"text"}]}]}]},{"type":"hr","attrs":{"markup":"---"}}]},"metadata":{"date":"2026-06-05","name":"Security Scanning Tools","author":"@skillopedia","source":{"stars":27714,"repo_name":"claude-code-templates","origin_url":"https://github.com/davila7/claude-code-templates/blob/HEAD/cli-tool/components/skills/security/scanning-tools/SKILL.md","repo_owner":"davila7","body_sha256":"b530d0da3ce2988783f61a8a2eaa56cb24e83ada814dddb02add44430eb5d901","cluster_key":"e4e930a7c6bd222335955d02177d24be3b79c839539796b966330b625334f0e1","clean_bundle":{"format":"clean-skill-bundle-v1","source":"davila7/claude-code-templates/cli-tool/components/skills/security/scanning-tools/SKILL.md","bundle_sha256":"d6f172dd422ee70236e362f973c3ef4635c9245a2cc4f474b916ddaf2e4fd152","attachment_count":0,"text_attachments":0,"binary_attachments":0},"cluster_size":2,"skill_md_path":"cli-tool/components/skills/security/scanning-tools/SKILL.md","import_metadata":{"date":"2026-06-05","author":"@skillopedia","version":"v1","category":"security","category_label":"Security"},"exact_dupes_collapsed_into_this":1},"version":"v1","category":"security","metadata":{"author":"zebbern","version":"1.1"},"import_tag":"clean-skills-v1","description":"This skill should be used when the user asks to \"perform vulnerability scanning\", \"scan networks for open ports\", \"assess web application security\", \"scan wireless networks\", \"detect malware\", \"check cloud security\", or \"evaluate system compliance\". It provides comprehensive guidance on security scanning tools and methodologies."}},"renderedAt":1782980125305}

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.