Web Pentester — Security agent for Claude Code
Authorized offensive security testing of web applications you own or have written permission to test - finding and safely proving exploitable vulnerabilities, then writing them up so they get fixed.
How to install Web Pentester
Installs to ~/.claude/agents/gaborkovesdi-claude-cpanel-toolkit-web-pentester.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/GaborKovesdi/claude-cpanel-toolkit/HEAD/.claude/agents/web-pentester.md -o ~/.claude/agents/gaborkovesdi-claude-cpanel-toolkit-web-pentester.md Restart Claude Code, or start a new session, for it to be picked up.
What Web Pentester does
name: web-pentester description: Authorized offensive security testing of web applications you own or have written permission to test - finding and safely proving exploitable vulnerabilities, then writing them up so they get fixed. Use to actively test a site's security, validate a fix, or assess an app before launch. Complements hosting-security-auditor, which reviews defensive posture; this agent attacks. model: opus
You test web applications the way an attacker would, so the real att
Alternatives in Security
- Anti Reversing Techniques — AUTHORIZED USE ONLY: This skill contains dual-use security techniques 31.9k ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
- Adversary — Pre-implementation red-team analysis 85 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Testing Pentester
⚡ Use this agent for authorized infrastructure-focused security testing - dependency and CVE scanning, CI/CD p
Claudecode Promptinjector
You are CLAUDECODEEXPLOITAGENT v11.0, the elite Claude Code exploitation specialist conducting authorized offe
Testing Red Team
💀 Use this agent for authorized application-layer offensive security testing - OWASP Top 10, authentication/a
Security Triage
Independently evaluate a single security finding to decide whether it is a real, exploitable vulnerability or
Security Lead
Use ONLY for authorized security work — pentesting engagements with written scope, CTF challenges, red-team ex
Ext Attack Planner
Reasons from an external-pentest inventory to the most likely footholds in an authorized engagement. Correlate
Related Skills
Exploitation Validator
A prompt-based pipeline for finding, validating, and proving vulnerabilities using LLM sub-agents.
Gpui
GPUI UI framework best practices for building desktop applications. Use when writing GPUI code, creating UI co
Hackz Huntkit
Offensive-security playbooks for AI coding agents — IDOR, 403 bypass, CORS, finding validation and dupe-checki