Skip to content
Get packs

Proxy Routing and Tool Bootstrap

Reroutes blocked pentest requests through proxies and builds replacement tools in Python

Source Download skill
Repository
AIPentest/CyberStrikeAI
Stars
8,323
Licence
Apache-2.0
Files
1 file

What it does

This is a playbook that tells an AI agent what to do when a security test gets blocked (HTTP 403, 429, WAF blocks, timeouts). Instead of retrying, the agent follows a fixed sequence: look up the target's country, fetch SOCKS5 or HTTP proxies for that country from ProxyScrape, test them against the target, and fall back to Tor. It also tells the agent to write simple Python substitutes when a tool like nmap, sqlmap or ffuf is missing, generate wordlists from the target's name, and use interactsh or a VPS listener to confirm blind vulnerabilities via callbacks.

Great for

  • Authorized penetration testers working on in-scope targets who want an agent to automate routine evasion steps
  • Red team operators building repeatable workflows around a shared findings log
  • Security students learning how proxy rotation and out-of-band testing work

Skip it if

  • Testing systems you do not own or have written permission to test: the skill is built to get past blocks, which is illegal without authorization
  • Anyone expecting a self-contained tool: it depends on other skills (pentest-blackboard) and on external tools being installed
  • Sensitive or regulated environments: proxy lists come from random public sources, so traffic may be logged or intercepted by unknown operators

Try asking

  • “Our staging API keeps returning 429 when I scan it. Switch to proxies and retry the request.”
  • “nmap is not installed on this box. Write a Python port scanner that does the same job.”
  • “Set up an interactsh callback so I can confirm the blind SQL injection on the login form.”
  • “Generate a password wordlist from the company name acme-corp and its common variants.”
Step-by-step guide: how to use Proxy Routing and Tool BootstrapInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    proxy-tool-bootstrap.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip proxy-tool-bootstrap.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip proxy-tool-bootstrap.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only point it at targets with written authorization, and keep the scope and rules of engagement in view before enabling proxy rotation.
  • Review the proxy sources and avoid sending credentials or session tokens through unknown public proxies; prefer SOCKS5 with verified endpoints.
  • Install the external tools first so the agent uses them rather than the weaker Python fallbacks.

What's inside

  • SKILL.md

Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.