# Network Appliance Offensive

Offensive testing of perimeter network appliances and VPN crypto, IKE/IPsec...

- Repository: https://github.com/transilienceai/communitytools (600 stars)
- Category: Testing
- License: MIT
- Last updated: 2026-07-29
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add transilienceai/communitytools --skill network-appliance-offensive -g -a claude-code -y`
Codex: `npx skills add transilienceai/communitytools --skill network-appliance-offensive -g -a codex -y`
Cursor: `npx skills add transilienceai/communitytools --skill network-appliance-offensive -g -a cursor -y`
Gemini CLI: `npx skills add transilienceai/communitytools --skill network-appliance-offensive -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add transilienceai/communitytools`

## Description

Offensive testing of perimeter network appliances and VPN crypto, IKE/IPsec (aggressive-mode, transform/DH enum, NAT-T), Check Point SIC/OPSEC, safe firmware/patch-level inference for FortiGate/PAN-OS/Cisco ASA/Citrix feeding CVE applicability, NTLM Type-2 target-info decode, handshake-completion TLS-version probing, and an RST-TTL forgery discriminator. The active/offensive counterpart to the static firewall-review skill. Use when a perimeter firewall/VPN/appliance is in scope and you must test it (not just audit a config), without reinventing raw-socket protocol tooling each engagement.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Network-Appliance Offensive

`firewall-review` audits a *config* statically; `infrastructure` covers *generic* ports/DNS/SMB. Neither tests a live perimeter **appliance** or its **VPN crypto**, so IKE builders, SIC/OPSEC fingerprinting, and TTL discriminators were reinvented from raw sockets each engagement, often shallowly, and CVE applicability was left UNDETERMINED across whole estates. This skill provides the deterministic, tested tools and the precondition-gated methodology. **Non-destructive only**, every tool observes/decodes/infers; none fires an exploit, and CVE applicability is a *precondition check*, never a blind "vulnerable."

## Tools

The rest: https://github.com/transilienceai/communitytools/blob/HEAD/skills/network-appliance-offensive/SKILL.md