Generate and edit Draw.io, Mermaid, and Excalidraw diagrams from natural language using a structured JSON spec.
Security
Pentest C2 Operator
Try itCoordinate authorized C2 simulation and detection tests.
What it does
Track infrastructure, persistence, and alerting outcomes from C2 simulation.
The skill document
Pentest C2 Operator
Stage
- PTES: 5-6
- MITRE: TA0011
Objective
Track infrastructure, persistence, and alerting outcomes from C2 simulation.
Required Workflow
- Validate scope before any active action and reject out-of-scope targets.
- Run only authorized checks aligned to PTES, OWASP WSTG, NIST SP 800-115, and MITRE ATT&CK.
- Write findings in canonical finding_schema format with reproducible PoC notes.
- Honor dry-run mode and require explicit --i-have-authorization for live execution.
- Export deterministic artifacts for downstream skill consumption.
Execution
python skills/pentest-c2-operator/scripts/c2_operator.py --scope scope.json --target --input --output --format json --dry-run
Outputs
c2-infrastructure.jsonpersistence-mechanisms.jsonc2-report.json
References
references/tools.mdskills/autonomous-pentester/shared/scope_schema.jsonskills/autonomous-pentester/shared/finding_schema.json
Legal and Ethical Notice
WARNING AUTHORIZED USE ONLY
This skill executes real security testing tools against live targets.
Use only with written authorization.
Related skills
Join a video meeting as an AI bot with voice, avatar, and screenshare across four operating modes.
Stores durable facts in a categorized, plain-markdown vault on disk, alongside your agent's built-in memory.
Write, debug, and tune Playwright specs with locator strategy, trace diagnosis, and CI-aware timeouts.
Find why your productivity system keeps failing, then apply the smallest fix — capacity math, bottleneck routing, durable local notes.
Fetch raw ad creative, app, ranking, and revenue data from AdMapix as structured JSON.
More from 0x-professor
Browse all skillsProduce reusable workflow blueprints with trigger, steps, dependencies, and exportable artifacts.
Evaluate auth, session, and MFA bypass weaknesses.
Build pro-grade Nmap scan plans and commands
Map AD credential and lateral movement attack paths.
Design Gmail, Drive, Sheets, and Calendar automations with scope-aware plans. Use for repeatable daily task automation with explicit OAuth scopes and audit-r...
Scaffold MCP server projects and baseline tool contract checks. Use for defining tool schemas, generating starter server layouts, and validating MCP-ready st...