📦
content-creator
88إنشاء محتوى تسويقي متسق مع العلامة التجارية
تحتاج فرق التسويق إلى محتوى يبقى متسقًا عبر القنوات. تساعد هذه المهارة في تخطيط المحتوى وكتابته وتحليله وتحسينه بما يتوافق مع نبرة العلامة التجارية وSEO.
الكتابة والمحتوى عرض
المهارات scanning-tools
📦
scanning-tools
v1.1 مراجعة المحتوى r1 حرج ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات
إجراء فحوصات أمنية مصرح بها
تحتاج فرق الأمن إلى سير عمل متسق لفحص الأنظمة المصرح بها دون تفويت الفحوصات الشائعة. تنظم هذه المهارة خيارات الأدوات والأوامر وخطوات إعداد التقارير وإرشادات التحقق من الصحة لـ Claude وCodex وClaude Code.
يدعم: Claude Codex Code(CC)
لا تثبّت هذا Skill تلقائيًا.
تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.
التثبيت باستخدام Agent لدي
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
طلب الوكيل
Review the Skillstore skill "scanning-tools" from https://skillstore.io/skills/sickn33-scanning-tools.md and its manifest at https://skillstore.io/api/skills/sickn33-scanning-tools/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
موارد مهيّأة لـ Agents
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
اختبرها
جارٍ استخدام "scanning-tools". أنشئ خطة فحص لشبكة فرعية داخلية معتمدة وتطبيق ويب.
النتيجة المتوقعة:
خطة مرحلية تتضمن فحوصات التفويض، واكتشاف المضيفين، وحدود زاحف الويب، والتحقق من الثغرات، والتعامل مع الأدلة، ومحطات إعداد التقارير.
جارٍ استخدام "scanning-tools". لخص نتائج الماسح للقيادة.
النتيجة المتوقعة:
ملخص تنفيذي يتضمن موضوعات المخاطر، والأنظمة المتأثرة، وتأثير الأعمال، ومالكي المعالجة، وخطوات التحقق اللاحقة.
جارٍ استخدام "scanning-tools". استكشف خلل فحص لم يكتشف المضيفين المتوقعين.
النتيجة المتوقعة:
قائمة تحقق تغطي تأكيد النطاق، وسلوك جدار الحماية، وطرق الاكتشاف، وإعدادات DNS، وتوقيت الماسح، والتحقق من الاتصال.
التدقيق الأمني
حرجv5 • ٩/٧/٢٠٢٦ فتح التقرير المرتبط بالإصدار
The audit confirms substantial high-risk scanning and exploitation guidance throughout SKILL.md, including Nmap, Masscan, Aircrack-ng, Metasploit, sudo-driven tools, and active web scanners. Several Markdown backtick detections are documentation artifacts, but the skill still instructs users to run intrusive commands and includes critical Internet-scale scanning and exploit validation workflows. No prompt injection text was found.
1
الملفات التي تم فحصها
595
الأسطر التي تم تحليلها
86
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة
مخاوف أمنية مؤكدة (59)
حرج
Metasploit framework
#### Metasploit Vulnerability Validation
The skill explicitly introduces Metasploit vulnerability validation and starts msfconsole. Metasploit is exploitation tooling and is a critical marketplace risk indicator.
حرج
Metasploit framework
# Start Metasploit
The skill explicitly introduces Metasploit vulnerability validation and starts msfconsole. Metasploit is exploitation tooling and is a critical marketplace risk indicator.
حرج
Global Internet Mass Scanning Guidance
The skill includes Masscan guidance for scanning 0.0.0.0/0 at a high rate. This enables indiscriminate Internet probing outside an authorized scope.
The exact command targets 0.0.0.0/0 and specifies a very high scan rate, which directly confirms global mass scanning intent.
مرتفع
Certificate/key files
zap.sh -daemon -port 8080 -config api.key=<your_key>
The command places a ZAP API key value in command-line arguments. Even with a placeholder, this encourages handling sensitive API material in an exposed process command.
مرتفع
System reconnaissance
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The Nmap timing option is described as paranoid and for IDS evasion. That context supports stealthy reconnaissance, not just benign inventory.
مرتفع
System reconnaissance
sudo airodump-ng -c <channel> --bssid <target_bssid> -w capture wlan0mon
The Aircrack-ng capture command targets a specific wireless BSSID and writes captures. That is targeted wireless reconnaissance activity.
مرتفع
Network scanning tools
#### Nmap (Network Mapper)
The line names a network scanning tool section that is followed by executable scanner guidance. It is enabling context for high-risk scanning workflows.
مرتفع
Network scanning tools
nmap -sn 192.168.1.0/24 # Ping scan (no port scan)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
عرض جميع النتائج المؤكدة البالغة 59
مرتفع
Network scanning tools
nmap -sL 192.168.1.0/24 # List scan (DNS resolution)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -Pn 192.168.1.100 # Skip host discovery
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -sS 192.168.1.100 # TCP SYN scan (stealth)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -sT 192.168.1.100 # TCP connect scan
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -sU 192.168.1.100 # UDP scan
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -sA 192.168.1.100 # ACK scan (firewall detection)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -p 80,443 192.168.1.100 # Specific ports
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -p- 192.168.1.100 # All 65535 ports
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -p 1-1000 192.168.1.100 # Port range
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap --top-ports 100 192.168.1.100 # Top 100 common ports
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -sV 192.168.1.100 # Service version detection
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -O 192.168.1.100 # OS detection
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -A 192.168.1.100 # Aggressive (OS, version, scripts)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -T4 192.168.1.100 # Aggressive (faster)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -T5 192.168.1.100 # Insane (fastest)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap --script=vuln 192.168.1.100 # Vulnerability scripts
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap --script=http-enum 192.168.1.100 # Web enumeration
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap --script=smb-vuln* 192.168.1.100 # SMB vulnerabilities
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap --script=default 192.168.1.100 # Default script set
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -oN scan.txt 192.168.1.100 # Normal output
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -oX scan.xml 192.168.1.100 # XML output
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -oG scan.gnmap 192.168.1.100 # Grepable output
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
nmap -oA scan 192.168.1.100 # All formats
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
#### Masscan
The line names a network scanning tool section that is followed by executable scanner guidance. It is enabling context for high-risk scanning workflows.
مرتفع
Network scanning tools
masscan -p80 192.168.1.0/24 --rate=1000
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
masscan -p80,443,8080 192.168.1.0/24 --rate=10000
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
masscan -p0-65535 192.168.1.0/24 --rate=5000
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
masscan 0.0.0.0/0 -p443 --rate=100000 --excludefile exclude.txt
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
masscan -p80 192.168.1.0/24 -oG results.gnmap
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
masscan -p80 192.168.1.0/24 -oJ results.json
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
masscan -p80 192.168.1.0/24 -oX results.xml
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
masscan -p80 192.168.1.0/24 --banners
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
# Import Nmap results
The line imports Nmap results into the Metasploit workflow. It connects network scan data to exploitation-oriented tooling.
مرتفع
Network scanning tools
- Host discovery (Nmap ping sweep)
The line recommends host discovery or Masscan/Nmap for network discovery. This supports active reconnaissance of networks.
مرتفع
Network scanning tools
| Network Discovery | Nmap, Masscan |
The line recommends host discovery or Masscan/Nmap for network discovery. This supports active reconnaissance of networks.
مرتفع
Network scanning tools
### Nmap Cheat Sheet
The line names a network scanning tool section that is followed by executable scanner guidance. It is enabling context for high-risk scanning workflows.
مرتفع
Network scanning tools
| Ping Scan | `nmap -sn <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
| Quick Scan | `nmap -T4 -F <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
| Full Scan | `nmap -p- <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
| Service Scan | `nmap -sV <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
| OS Detection | `nmap -O <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
| Aggressive | `nmap -A <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
| Vuln Scripts | `nmap --script=vuln <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
| Stealth Scan | `nmap -sS -T2 <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
1. Try different discovery methods: `nmap -Pn` or `nmap -sn -PS/PA/PU`
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
3. Use TCP SYN scan: `nmap -PS22,80,443`
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
1. Increase timing: `nmap -T4` or `-T5`
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
مرتفع
Network scanning tools
3. Use Masscan for initial discovery
The line recommends host discovery or Masscan/Nmap for network discovery. This supports active reconnaissance of networks.
مرتفع
Wireless Deauthentication And Credential Cracking Guidance
The skill provides Aircrack-ng commands for targeted capture, deauthentication, WPA handshake cracking, and WEP cracking. These actions can disrupt networks or recover credentials.
The line range explicitly labels a deauthentication attack and includes WPA and WEP cracking commands, leaving little ambiguity about offensive capability.
متوسط
Destructive Malware Scan Removal Command
The skill recommends a ClamAV removal option that can delete files during a scan. Running this on production paths could cause data loss.
The command includes the removal option on a scan path, which directly supports deletion behavior even if intended for infected files.
عناصر مراجعة القدرات (86)
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
حرج
Ruby/shell backtick execution
```bash
The line range contains Metasploit startup, database import, scanner module use, target setting, and exploit suggestion commands. This is explicit exploitation workflow guidance.
مرتفع
Ruby/shell backtick execution
```bash
The line range is a shell block with Nmap host discovery, port scanning, service detection, OS detection, and vulnerability scripts. These commands actively probe network targets and can be misused outside authorization.
مرتفع
Ruby/shell backtick execution
```bash
The line range documents Masscan commands, including high-rate and Internet-wide scanning examples. This is real external scanner guidance with significant abuse potential.
مرتفع
Ruby/shell backtick execution
```bash
The line range contains OWASP ZAP commands for quick scans, spidering, active scanning, and daemon API configuration. Active web scanning can affect external applications.
مرتفع
Ruby/shell backtick execution
```bash
The line range contains Docker-based OWASP ZAP scan commands against a target URL. These commands run external web scanning tools.
مرتفع
Ruby/shell backtick execution
```bash
The line range contains Aircrack-ng commands for monitor mode, wireless capture, deauthentication, and password cracking. These are offensive wireless testing commands.
مرتفع
Ruby/shell backtick execution
```bash
The line range contains privileged Lynis audit commands and report generation. These commands read broad host security state with elevated permissions.
مرتفع
Ruby/shell backtick execution
| Ping Scan | `nmap -sn <target>` |
The table entry provides an Nmap ping scan command template. It is an executable network discovery command.
مرتفع
Ruby/shell backtick execution
| Quick Scan | `nmap -T4 -F <target>` |
The table entry provides an Nmap quick scan command template. It is an executable network scanning command.
مرتفع
Ruby/shell backtick execution
| Full Scan | `nmap -p- <target>` |
The table entry provides an Nmap full-port scan command template. Full port scans can be intrusive without authorization.
مرتفع
Ruby/shell backtick execution
| Service Scan | `nmap -sV <target>` |
The table entry provides an Nmap service detection command template. Service enumeration actively probes target systems.
مرتفع
Ruby/shell backtick execution
| OS Detection | `nmap -O <target>` |
The table entry provides an Nmap OS detection command template. OS fingerprinting is active reconnaissance.
مرتفع
Ruby/shell backtick execution
| Aggressive | `nmap -A <target>` |
The table entry provides an Nmap aggressive scan command template. Aggressive scanning combines multiple probes and scripts.
مرتفع
Ruby/shell backtick execution
| Vuln Scripts | `nmap --script=vuln <target>` |
The table entry provides an Nmap vulnerability script command template. Vulnerability scripts can be intrusive on targets.
مرتفع
Ruby/shell backtick execution
| Stealth Scan | `nmap -sS -T2 <target>` |
The table entry provides an Nmap stealth scan command template. Stealth scan guidance can support unauthorized reconnaissance.
مرتفع
Ruby/shell backtick execution
1. Try different discovery methods: `nmap -Pn` or `nmap -sn -PS/PA/PU`
The troubleshooting guidance provides Nmap discovery commands for hosts that are not detected. These commands can expand active probing behavior.
مرتفع
Ruby/shell backtick execution
3. Use TCP SYN scan: `nmap -PS22,80,443`
The troubleshooting guidance provides an Nmap TCP SYN discovery command. It is active network reconnaissance guidance.
مرتفع
Ruby/shell backtick execution
1. Increase timing: `nmap -T4` or `-T5`
The troubleshooting guidance recommends faster Nmap timing settings. Higher timing can increase scan intensity and operational impact.
مرتفع
sudo privilege escalation
sudo systemctl start nessusd
The command starts the Nessus daemon with sudo. It launches a privileged vulnerability scanning service on the host.
مرتفع
sudo privilege escalation
sudo apt install openvas
The command uses sudo to install, configure, or start OpenVAS services. Privileged scanner setup changes the host and expands attack surface if misused.
مرتفع
sudo privilege escalation
sudo gvm-setup
The command uses sudo to install, configure, or start OpenVAS services. Privileged scanner setup changes the host and expands attack surface if misused.
مرتفع
sudo privilege escalation
sudo gvm-start
The command uses sudo to install, configure, or start OpenVAS services. Privileged scanner setup changes the host and expands attack surface if misused.
مرتفع
sudo privilege escalation
sudo airmon-ng start wlan0
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
مرتفع
sudo privilege escalation
sudo airodump-ng wlan0mon
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
مرتفع
sudo privilege escalation
sudo airodump-ng -c <channel> --bssid <target_bssid> -w capture wlan0mon
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
مرتفع
sudo privilege escalation
sudo aireplay-ng -0 10 -a <bssid> wlan0mon
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
مرتفع
sudo privilege escalation
sudo freshclam
The command updates antivirus definitions with sudo. It modifies system-maintained security data and requires elevated trust.
مرتفع
sudo privilege escalation
sudo lynis audit system
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
مرتفع
sudo privilege escalation
sudo lynis audit system --quick
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
مرتفع
sudo privilege escalation
sudo lynis audit system --profile server
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
مرتفع
sudo privilege escalation
sudo lynis audit system --report-file /tmp/lynis-report.dat
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
مرتفع
sudo privilege escalation
sudo lynis show profiles
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
مرتفع
sudo privilege escalation
sudo lynis audit system --tests-from-group malware
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
مرتفع
Hardcoded IP address
masscan 0.0.0.0/0 -p443 --rate=100000 --excludefile exclude.txt
The command scans 0.0.0.0/0 with Masscan at a very high rate. That is Internet-wide probing guidance with clear misuse potential.
مرتفع
Hardcoded IP address
set RHOSTS 192.168.1.0/24
The IP range is assigned to Metasploit RHOSTS for an SMB scanner module. This defines targets for exploitation-oriented scanning.
متوسط
Ruby/shell backtick execution
```bash
The line range contains Nessus service and scan commands that create and launch vulnerability scans against a network range. This is external scanner execution guidance, not inert prose.
متوسط
Ruby/shell backtick execution
```bash
The line range contains OpenVAS installation, service startup, and scan target creation commands. These commands run scanner tooling and define network targets.
متوسط
Ruby/shell backtick execution
```bash
The line range contains Nikto web server scanner commands and tuning options. This is executable scanner guidance for probing web targets.
متوسط
Ruby/shell backtick execution
```bash
The line range contains Kismet commands for wireless detection and hidden network observation. The commands gather wireless network information.
متوسط
Ruby/shell backtick execution
```bash
The line range contains ClamAV commands that scan directories and can move or remove files. These external commands can alter local files if run.
متوسط
Ruby/shell backtick execution
```bash
The line range contains Prowler installation and AWS assessment commands. These commands access cloud security data and require careful authorization.
متوسط
Ruby/shell backtick execution
```bash
The line range contains ScoutSuite installation and cloud audit commands for AWS, Azure, and GCP. These commands access cloud account configuration data.
متوسط
Ruby/shell backtick execution
```bash
The line range contains OpenSCAP evaluation and fix generation commands. These commands inspect compliance state and can generate remediation scripts.
متوسط
Ruby/shell backtick execution
```bash
The line range contains report conversion and scanner report export commands. It is external command guidance tied to security scan results.
متوسط
Ruby/shell backtick execution
2. Reduce port range: `--top-ports 100`
The troubleshooting guidance recommends changing the scanned port range. This is scanner operation guidance even though it is presented as an option.
متوسط
Hardcoded URL
zap-cli quick-scan https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
متوسط
Hardcoded URL
zap-cli spider https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
متوسط
Hardcoded URL
zap-cli active-scan https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
متوسط
Hardcoded URL
-t https://target.com -r report.html
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
متوسط
Hardcoded URL
-t https://target.com -r report.html
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
متوسط
Hardcoded URL
nikto -h https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
متوسط
Hardcoded IP address
nmap -sn 192.168.1.0/24 # Ping scan (no port scan)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -sL 192.168.1.0/24 # List scan (DNS resolution)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -Pn 192.168.1.100 # Skip host discovery
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -sS 192.168.1.100 # TCP SYN scan (stealth)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -sT 192.168.1.100 # TCP connect scan
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -sU 192.168.1.100 # UDP scan
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -sA 192.168.1.100 # ACK scan (firewall detection)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -p 80,443 192.168.1.100 # Specific ports
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -p- 192.168.1.100 # All 65535 ports
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -p 1-1000 192.168.1.100 # Port range
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap --top-ports 100 192.168.1.100 # Top 100 common ports
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -sV 192.168.1.100 # Service version detection
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -O 192.168.1.100 # OS detection
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -A 192.168.1.100 # Aggressive (OS, version, scripts)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -T4 192.168.1.100 # Aggressive (faster)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -T5 192.168.1.100 # Insane (fastest)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap --script=vuln 192.168.1.100 # Vulnerability scripts
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap --script=http-enum 192.168.1.100 # Web enumeration
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap --script=smb-vuln* 192.168.1.100 # SMB vulnerabilities
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap --script=default 192.168.1.100 # Default script set
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -oN scan.txt 192.168.1.100 # Normal output
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -oX scan.xml 192.168.1.100 # XML output
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -oG scan.gnmap 192.168.1.100 # Grepable output
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nmap -oA scan 192.168.1.100 # All formats
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
masscan -p80 192.168.1.0/24 --rate=1000
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
masscan -p80,443,8080 192.168.1.0/24 --rate=10000
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
masscan -p0-65535 192.168.1.0/24 --rate=5000
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oG results.gnmap
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oJ results.json
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oX results.xml
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
masscan -p80 192.168.1.0/24 --banners
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
nessuscli scan --create --name "Internal Scan" --targets 192.168.1.0/24
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Hardcoded IP address
<hosts>192.168.1.0/24</hosts>
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
متوسط
Temp directory access
sudo lynis audit system --report-file /tmp/lynis-report.dat
The command writes a privileged Lynis report to /tmp. Security reports can contain sensitive host details and temp paths may have weaker handling controls.
عوامل الخطر
⚙️ الأوامر الخارجية (50)
SKILL.md:44-83 SKILL.md:83-89 SKILL.md:89-107 SKILL.md:107-115 SKILL.md:115-127 SKILL.md:127-140 SKILL.md:140-161 SKILL.md:161-169 SKILL.md:169-183 SKILL.md:183-197 SKILL.md:197-213 SKILL.md:213-216 SKILL.md:216-224 SKILL.md:224-230 SKILL.md:230-251 SKILL.md:251-259 SKILL.md:259-280 SKILL.md:280-286 SKILL.md:286-299 SKILL.md:299-307 SKILL.md:307-328 SKILL.md:328-334 SKILL.md:334-353 SKILL.md:353-361 SKILL.md:361-382 SKILL.md:382-388 SKILL.md:388-403 SKILL.md:403-411 SKILL.md:411-427 SKILL.md:427-433 SKILL.md:433-447 SKILL.md:447-497 SKILL.md:497-514 SKILL.md:514-522 SKILL.md:522-523 SKILL.md:523-524 SKILL.md:524-525 SKILL.md:525-526 SKILL.md:526-527 SKILL.md:527-528 SKILL.md:528-529 SKILL.md:529-571 SKILL.md:571 SKILL.md:573-579 SKILL.md:579 SKILL.md:580-582 SKILL.md:117 SKILL.md:142 SKILL.md:143 SKILL.md:146
🌐 الوصول إلى الشبكة (48)
SKILL.md:505 SKILL.md:120 SKILL.md:149 SKILL.md:202 SKILL.md:205 SKILL.md:206 SKILL.md:219 SKILL.md:223 SKILL.md:232 SKILL.md:294 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:54 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:91 SKILL.md:92 SKILL.md:95 SKILL.md:98 SKILL.md:101 SKILL.md:102 SKILL.md:103 SKILL.md:106 SKILL.md:123 SKILL.md:159 SKILL.md:171 SKILL.md:347 SKILL.md:538
📁 الوصول إلى نظام الملفات (3)
الأنماط المكتشفة
Metasploit framework×2System reconnaissance×2Network scanning tools×51
دقّقه: codex عرض سجل التدقيق →
شارك واستشهد بهذا التقرير
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
نسخ رابط التقرير
https://skillstore.io/skills/sickn33-scanning-tools/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportشارة Markdown
[](https://skillstore.io/skills/sickn33-scanning-tools?utm_source=security_passport_badge)شارة HTML
<a href="https://skillstore.io/skills/sickn33-scanning-tools?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-scanning-tools/security.svg" alt="Skillstore security assessment" loading="lazy"></a>بطاقة قابلة للتضمين
<iframe src="https://skillstore.io/embed/skills/sickn33-scanning-tools.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>الاستشهادات الأكاديمية (APA · BibTeX · CFF)
اقتباس APA
sickn33. (2026). scanning-tools security audit report (audit version 5) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-scanning-tools/audits/5اقتباس BibTeX
@techreport{sickn33-sickn33-scanning-tools-2026,
author = {sickn33},
title = {scanning-tools security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-scanning-tools/audits/5},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "scanning-tools security audit report (audit version 5)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-scanning-tools/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-scanning-tools:audit:5"
description: "Skillstore immutable audit report identifier"
تقييم Skillstore
سبب هذا التقييم موثوقية الأدلة: متوسط 55
الهندسة المعمارية
85
قابلية الصيانة
87
المحتوى
69
المجتمع
78
الامتثال للمواصفات
ما الذي يمكنك بناؤه
تخطيط فحوصات الثغرات الداخلية
إنشاء خطة فحص محددة النطاق تغطي الاكتشاف، وتعداد الخدمات، وفحوصات الثغرات، وإعداد التقارير للأصول المعتمدة.
التحضير لاختبار تطبيقات الويب
اختيار أدوات فحص الويب، وتحديد حدود الزحف والاختبارات النشطة، وتنظيم النتائج لمراجعة المعالجة.
جمع أدلة الامتثال
استخدام ماسحات الامتثال وخطوات إعداد التقارير لجمع الأدلة لمراجعات CIS أو PCI-DSS أو HIPAA أو ضوابط داخلية.
جرّب هذه الموجّهات
التحقق من الجاهزية
راجع نطاق الفحص المصرح به لدي، والنافذة الزمنية، وقائمة الأدوات. حدد المتطلبات الأساسية الناقصة والفحوصات الأولية ذات التأثير المنخفض.
بناء خطة فحص
أنشئ خطة فحص أمني مرحلية لهذه الأصول المعتمدة: [asset list]. قم بتضمين الاكتشاف، وفحوصات الثغرات، والتحقق من الصحة، وإعداد التقارير.
مقارنة نتائج الماسحات
قارن نتائج الماسحات المصرح بها هذه. جمّع التكرارات، وميّز الإيجابيات الكاذبة المحتملة، ورتب المشكلات حسب تأثيرها على الأعمال.
تصميم برنامج تقييم
صمم برنامج فحص متكرر لمؤسستي. قم بتضمين ضوابط النطاق، ونوافذ الفحص الآمنة، والتعامل مع الأدلة، وإعداد التقارير، وقواعد التصعيد.
أفضل الممارسات
- أكد وجود تفويض مكتوب ونطاق محدد قبل أي فحص.
- ابدأ باكتشاف منخفض التأثير، ثم زد الشدة فقط عند الموافقة.
- سجل إصدارات الأدوات، والنوافذ الزمنية، والأهداف، والأدلة لكل تقييم.
تجنب
- فحص أهداف عامة أو تابعة لأطراف ثالثة دون إذن مكتوب.
- استخدام فحوصات عالية المعدل أو تدخلية خلال ساعات العمل دون تنسيق.
- نشر مخرجات الفحص الخام التي تتضمن أسرارًا أو عناوين داخلية أو تفاصيل قابلة للاستغلال.
الأسئلة المتكررة
هل تشغل هذه المهارة الفحوصات تلقائيًا؟
لا. توفر إرشادات لسير العمل والأوامر يمكن للمستخدمين تطبيقها في بيئتهم المصرح بها.
من ينبغي أن يستخدم هذه المهارة؟
هي مخصصة لمحترفي الأمن الذين يعملون ضمن نطاق تقييم مصرح به بوضوح.
هل يمكنها التحقق من نتائج الفحص؟
يمكنها المساعدة في تنظيم خطوات التحقق، ولكن يجب أن يؤكد مراجع مؤهل النتائج وتأثيرها على الأعمال.
هل تتضمن فحص تطبيقات الويب؟
نعم. تغطي Burp Suite وOWASP ZAP وNikto وتخطيط الزحف والاختبار النشط وإنشاء التقارير.
ما أهم مخاوف السلامة؟
تتضمن الإرشادات ماسحات تدخلية، وأوامر ذات صلاحيات مرتفعة، وهجمات لاسلكية، وأمثلة للتحقق من الاستغلال.
هل يمكنها دعم عمل الامتثال؟
نعم. تشير إلى أدوات وسير عمل لـ CIS وPCI-DSS وHIPAA وLynis وOpenSCAP وإعداد تقارير الأدلة.
تفاصيل المطور
المؤلف
sickn33الترخيص
MIT
إصدار المؤلف
v1.1
مراجعة Skillstore
r1
تنبيه الإصدار
الإصدار الذي أعلنه المؤلف ليس SemVer صالحًا.
مرجع
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
حداثة الصيانة
٢٠/٧/٢٠٢٦
الاستخدام
7 تنزيلات · 121 مشاهدات
بنية الملفات
📄 SKILL.md
المزيد من sickn33
عرض الكل📦
prompt-engineering-patterns
85حسّن مطالبات LLM باستخدام أنماط مثبتة
تستهلك المطالبات غير المتسقة الوقت وتجعل مخرجات الذكاء الاصطناعي صعبة الثقة. ترشد هذه المهارة تصميم المطالبات باستخدام أنماط قابلة لإعادة الاستخدام، وأمثلة، وخطوات تقييم، وسير عمل للتحسين.
الإنتاجية عرض
📦
senior-architect
81تصميم معماريات برمجية قابلة للتوسع
يصعب مقارنة قرارات المعمارية عبر أنظمة الويب والهواتف المحمولة والخلفية والسحابة. توفر هذه المهارة أدلة منظمة وسكربتات تمهيدية محلية للتقارير ومراجعة الاعتماديات وتوثيق المفاضلات.
البرمجة والتطوير عرض
📦
senior-fullstack
81بناء تطبيقات Fullstack بأنماط هندسية متقدمة
تحتاج الفرق إلى إرشادات متسقة للإعداد والبنية والمراجعة لتطبيقات الويب الحديثة. توفر هذه المهارة أدوات إنشاء هياكل أولية، ومراجع لسير العمل، ومطالبات للجودة لمشاريع React وNext.js وNode.js وGraphQL وPostgreSQL.
البرمجة والتطوير عرض
📦
prompt-engineer
81حسّن موجهات الذكاء الاصطناعي باستخدام Prompt Engineer
كتابة موجهات واضحة صعبة عندما تكون الأهداف غامضة أو معقدة. تحوّل هذه المهارة الطلبات الأولية إلى موجهات منظمة باستخدام أطر عمل مثبتة للموجهات.
الإنتاجية عرض
📦
product-manager-toolkit
80رتّب أولويات عمل المنتج باستخدام رؤى البحث
تحتاج فرق المنتج إلى طرق أسرع لترتيب الميزات، وتلخيص المقابلات، وتوثيق القرارات. توفر هذه المهارة تسجيل RICE، وتحليل المقابلات، وقوالب PRD للتخطيط المنظم.
الإنتاجية عرض
مهارات ذات صلة
عرض الكل📦
python-web-app-security-audit
90Audit Python Web Apps Before Release
بواسطة glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
الأمان والامتثال عرض
📦
isms-audit-expert
83تدقيق ضوابط ISMS وفق ISO 27001
بواسطة alirezarezvani
تتطلب عمليات تدقيق ISMS نطاقًا واضحًا وأدلة وأولويات قائمة على المخاطر. ترشد هذه المهارة تخطيط تدقيق ISO 27001 واختبار الضوابط وأعمال الاستعداد.
الأمان والامتثال عرض
📦
senior-security
81تعزيز مراجعات أمان التطبيقات
بواسطة alirezarezvani
غالبًا ما تفتقر مراجعات الأمان إلى قوائم تحقق متسقة وسير عمل قابل لإعادة الاستخدام. توفر هذه المهارة قوالب تمهيدية لمراجعات الأمان، وإرشادات مرجعية، وسكربتات تقارير بسيطة لـ Claude وCodex وClaude Code.
الأمان والامتثال عرض
📦
senior-secops
81أتمتة فحوصات SecOps
بواسطة alirezarezvani
تحتاج فرق الأمن إلى مسارات مراجعة متسقة عبر المشاريع. توفر هذه المهارة قوالب CLI تمهيدية لـ SecOps وأدلة مرجعية للفحوصات القابلة للتكرار.
الأمان والامتثال عرض
📦
security-engineering
81تعزيز قرارات هندسة الأمن
بواسطة 89jobrien
غالبا ما يمتد العمل الأمني عبر البنية المعمارية، والهوية، والامتثال، والاختبار، وتخطيط الاستجابة. تمنح هذه المهارة Claude وCodex وClaude Code إرشادات منظمة في هندسة الأمن.
الأمان والامتثال عرض
📦
security-analyzer
80تحليل مخاطر أمان المشروع
بواسطة Cornjebus
تكون مراجعات الأمان بطيئة عندما تكون بيانات التبعيات والحاويات وIaC موزعة عبر مستودع. تحصر هذه المهارة الأصول، وتتحقق من OSV.dev، وتعد تقارير معالجة ذات أولويات.
الأمان والامتثال عرض