-
Notifications
You must be signed in to change notification settings - Fork 32
Skills
CommonHuman-Lab edited this page Apr 19, 2026
·
1 revision
NyxStrike includes 9 pre-built security workflow playbooks mounted as MCP resources. When an AI agent connects via MCP, it can load and follow these skills automatically — giving it a structured, step-by-step methodology for each domain rather than improvising tool usage.
Each skill defines: a recommended tool sequence, decision logic, parameter guidance, and tips from real-world usage.
| Skill | Description |
|---|---|
| nmap-recon | Fast port discovery → service/version detection → targeted NSE scripts |
| web-recon | WAF detection → tech fingerprinting → directory fuzzing → crawling |
| web-vuln | CVE scanning → SQLi → XSS → traversal → framework-specific checks |
| subdomain-enum | Passive + active subdomain discovery → DNS records → live host probing |
| smb-enum | SMB version → share enumeration → user/group discovery → credential testing |
| exploitation | Exploit-DB search → Metasploit module → msfvenom payload generation |
| password-cracking | Hash identification → dictionary/mask cracking → network brute-force |
| binary-analysis | checksec → strings → binwalk → radare2 → ROP gadgets → gdb |
| cloud-audit | AWS/GCP/Azure config audit → container CVE scan → Kubernetes assessment |