Ext Attack Paths — Development skill for Claude Code
Launch the ext-attack-planner agent to reason from the enumerated exposures to likely footholds, then present a ranked plan for human approval before any exploitation.
How to install Ext Attack Paths
Installs to ~/.claude/skills/xcoy0te-claude-externalpentest-ext-attack-paths/SKILL.md
mkdir -p ~/.claude/skills/xcoy0te-claude-externalpentest-ext-attack-paths && curl -fsSL https://raw.githubusercontent.com/xcoy0te/Claude-ExternalPentest/HEAD/commands/ext-attack-paths.md -o ~/.claude/skills/xcoy0te-claude-externalpentest-ext-attack-paths/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Ext Attack Paths does
description: Launch the ext-attack-planner agent to reason from the enumerated exposures to likely footholds, then present a ranked plan for human approval before any exploitation.
Reason about exploitation paths from the collected inventory.
**Authorized engagements only.** Reads the active engagement's `scope.md` and the inventory from `/ext-recon`.
Steps:
- Resolve the active engagement directory (
$EDIR) from./ext-engagement/.current(fallback: newest folder under `./ex
Alternatives in Development
- Rank — /rank - Triage Scraped Jobs into a Ranked Shortlist 36.6k ★
- JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
- Fidelity — Measure how faithfully a clone reproduces a site — pixel-diff plus motion-fidelity into one 0-100 score, a let 3.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Ad Attack Paths
Launch the ad-attack-planner agent to reason low-privilege-to-Domain-Admin paths from the collected inventory
Ext Recon
Launch the ext-enumerator agent to run passive+active recon and service/web enumeration against the in-scope t
Zp Surface
Show the ranked attack surface and what it dispatches to. Usage: /zp-surface
Axguard Paths
Attack graph + vulnerability chaining (Phase 6). Chains Phase 1-5 findings into multi-hop attack paths. Usage:
Compress Proof
Given a working Coq proof, systematically search for shorter or cleaner alternatives using hammer tactics, lem
Tentacle Planner
You are the Tentacle Planner — a meta-agent that analyzes this codebase and creates department tentacles to or
Related Agents
Ext Attack Planner
Reasons from an external-pentest inventory to the most likely footholds in an authorized engagement. Correlate
AI PR Gate
Reviews bot-authored PRs for INV-91 compliance. Checks that the approved-by-human label is present and that th
Attack Surface
Stage 3 of Vulpine. Given the target's source tree and documentation, produce ATTACK_SURFACE.md — an enumerate
