Can I use this skill for cloud security audits?

Yes, it includes specialized guidance for tools like Prowler (AWS) and ScoutSuite (Multi-cloud) to assess security posture across major cloud providers.

Does this skill provide help with compliance reporting?

Yes, it includes instructions for running compliance-focused scans using OpenSCAP and Lynis to validate systems against CIS, PCI-DSS, and HIPAA standards.

Which security tools are supported by this skill?

This skill provides comprehensive guidance for a wide range of industry-standard tools including Nmap, Masscan, Burp Suite, Nessus, OpenVAS, Nikto, Prowler, and ScoutSuite.

Is this skill suitable for web application testing?

Absolutely. It provides detailed workflows for Burp Suite, OWASP ZAP, and Nikto specifically for identifying web-based vulnerabilities and misconfigurations.

Security Scanning Tools

Name: Security Scanning Tools
Author: boisenoise

byboisenoise

Security & Testing

Provides expert guidance and command-line patterns for network discovery, vulnerability assessment, and security auditing across diverse environments.

About

The Security Scanning Tools skill empowers users to execute professional-grade security audits by providing deep expertise in industry-standard tools like Nmap, Burp Suite, and Nessus. It covers everything from basic network discovery and web application testing to advanced cloud security assessments and compliance validation. By following a structured methodology, this skill helps identify, analyze, and document vulnerabilities in infrastructure, code, and cloud configurations, providing actionable remediation guidance.

Key Features

Cloud security posture management for AWS, GCP, and Azure via Prowler and ScoutSuite
Network discovery and port scanning with Nmap and Masscan techniques
Automated compliance scanning against CIS benchmarks and PCI-DSS standards
Web application security testing using Burp Suite, OWASP ZAP, and Nikto
0 GitHub stars
Wireless network auditing and penetration testing with Aircrack-ng and Kismet

Use Cases

Auditing web application security against the OWASP Top 10 vulnerabilities
Conducting a comprehensive vulnerability assessment of internal and external networks
Ensuring cloud infrastructure meets industry compliance and security best practices

About

Key Features

Cloud security posture management for AWS, GCP, and Azure via Prowler and ScoutSuite
Network discovery and port scanning with Nmap and Masscan techniques
Automated compliance scanning against CIS benchmarks and PCI-DSS standards
Web application security testing using Burp Suite, OWASP ZAP, and Nikto
0 GitHub stars
Wireless network auditing and penetration testing with Aircrack-ng and Kismet

Use Cases

Auditing web application security against the OWASP Top 10 vulnerabilities
Conducting a comprehensive vulnerability assessment of internal and external networks
Ensuring cloud infrastructure meets industry compliance and security best practices