Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    Fast Pentest Checklist: Quick Wins in the First Hour

    1

    A time-boxed engagement or a CTF round rewards coverage and speed, and a scanner-only pass misses the IDOR that pays.

    $6.99

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Fast Pentest Checklist: Quick Wins in the First Hour

    Fast Pentest Checklist: Quick Wins in the First Hour

    Example session with this skill installed

    I have two hours on a web app at app.example.com before the window closes. Give me the fastest path to the high-impact bugs.

    • Read your context and instructions
    • Compiled the fast pentest checklist

    Fast assessment plan: app.example.com (two-hour window)

    Top of the list (example run): Three high-impact checks to run first, before anything cosmetic.

    Surface and quick findings

    AreaResult
    Surface42 endpoints mapped, 2 hidden in JS bundles
    AuthJWT alg header not pinned, test alg confusion
    Access controlIDOR on /orders/{id}, sequential IDs
    InjectionSSTI candidate in the report export field
    InfraOrigin S3 bucket lists objects anonymously

    Run in this order

    1. IDOR on /orders: swap your ID for a neighbour's and confirm a cross-account read. High impact, fast.
    2. SSTI in export: send a simple arithmetic probe, escalate only if it renders.
    3. JWT alg: try none and HS or RS confusion against a known key.

    Hold for the report

    The S3 listing is a real finding but low effort to document, so capture it last with a screenshot and keep moving.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    A time-boxed engagement or a CTF round rewards coverage and speed, and a scanner-only pass misses the IDOR that pays. The trick is knowing the order that finds high-impact bugs fastest. This skill gives your agent that order and triages what you find while the clock runs.

    What your agent does

    • Maps the surface fast: endpoints, OpenAPI and GraphQL schemas, JS bundles and origin IPs behind a CDN or WAF.
    • Audits auth and sessions: MFA, OAuth, JWT, password reset and CSRF, in the order that tends to break first.
    • Tests access control: IDOR and BOLA, mass assignment and BFLA, across roles and object and function boundaries.
    • Probes high-impact inputs: SQLi, XSS, SSTI, XXE, SSRF, command injection, path traversal and file-upload chains.
    • Checks modern edges: HTTP request smuggling, WebSockets, gRPC, LLM prompt injection and cloud and Kubernetes misconfigurations.

    Built-in guard rails

    • Checklist, not an auto-attacker: it orders the work and triages findings. You run the requests in your own proxy.
    • No embedded payloads or secrets: it references public payload repos by name, nothing weaponized is shipped.
    • Authorized scope only: it assumes you are permitted to test the target.

    What's inside

    One SKILL.md of about 3,900 words across 10 sections, a speed-ordered checklist spanning web, API, cloud and emerging tech, plus a LICENSE.txt.

    Works with Claude Code, Codex, Cursor, and any agent that loads SKILL.md.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for Security.

    It is a coverage checklist for time-boxed work, not a scanner or an exploit tool. You run the actual requests with your own proxy and payloads. Only test targets you are authorized to assess.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 1 day ago

    Software
    Claude Code
    orCodex
    orCursor
    Optional
    Burp
    orZAP
    a scanner of your choice
    SecLists
    orPayloadsAllTheThings

    Permissions

    Network Access

    Allowed Hosts

    example.com
    Listed1 day ago

    What's inside

    Frequently Asked Questions

    No. It gives you an ordered checklist and triages what you find. You run the requests in Burp or your own tooling.

    No. It references public payload repos by name, nothing embedded.

    An agent that loads SKILL.md, plus your own proxy and scanner.

    No, it is built for speed and coverage in a time box. For root-cause depth, pair it with the Bug Identification skill.

    New in Security