attack-chain
ZHPlan penetration tests with evidence at each stage.
What it does
Coordinates authorized multi-stage penetration tests into planned attack paths and evidence-linked reports.
When to use it
Use when an authorized task crosses multiple attack stages; route single-stage tasks directly to specialist skills.
How to use it
Give it a multi-stage penetration-testing request; it plans the attack path, coordinates specialist skills, and has a report generated.
What you provide
- the target
- the intended endpoint
Uses
Good to know
- cannot be undone: Windows event logs; /var/log/auth.log; /var/log/syslog; shell history
What you need · 15
Uses subfinder for target-domain enumeration; the workflow directs bootstrap when tools are missing.
Uses amass for passive domain enumeration; the workflow directs bootstrap when tools are missing.
Access · 8
This skill
Windows event logs
Clears Windows event logs (irreversible)
/var/log/auth.log
Overwrites the authentication log (irreversible)