vapt
Installation
SKILL.md
VAPT — Vulnerability Assessment & Penetration Testing
Systematic, standards-based security assessment chaining Secator (recon/scanning), NetExec (network protocols/AD), Metasploit (exploitation), and raw Python (custom verification and chaining).
Assessment Types
| Type | Knowledge | Approach |
|---|---|---|
| Blackbox | Zero prior knowledge | Full external recon → scan → exploit chain |
| Greybox | Partial (e.g., user creds, architecture docs) | Targeted testing with known entry points |
| Whitebox | Full access (source, configs, creds) | Source review → deep config audit → focused exploit |
When starting, determine the assessment type and load the corresponding phase sequence.
Phase Sequence (All Assessments)
Every assessment follows this ordered pipeline. Each phase produces verified, documented output.