enum

Discover live hosts and enumerate open ports and services with nmap, gobuster, feroxbuster, and ffuf.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/duriandurino/openclawrino --skill enum
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: enum
Source: https://github.com/duriandurino/openclawrino/tree/main/enum
Command: npx skills add https://github.com/duriandurino/openclawrino --skill enum

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, gobuster, feroxbuster, ffuf, curl, smbclient, enum4linux, whatweb, nikto, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying live hosts on a network and discovering open ports and running services on those hosts, which is a critical first step in network penetration testing.

Core Features & Use Cases

  • Host Discovery: Identifies active machines on a network using ping sweeps.
  • Port Scanning: Scans for open TCP and UDP ports.
  • Service Enumeration: Detects service versions and runs default scripts for deeper insight.
  • Directory Busting: Scans web servers for hidden directories and files.
  • Use Case: When tasked to "scan the internal network for live hosts and enumerate all running services," this Skill provides a structured approach to gather essential reconnaissance data.

Quick Start

Use the enum skill to perform a quick port scan on the target IP address 192.168.1.105.

Frequently Asked Questions about enum

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a network for live hosts and open ports?

To scan a network for live hosts and open ports, this Skill automates ping sweeps to identify active machines and uses nmap to enumerate open TCP and UDP ports. It provides structured reconnaissance data for penetration testing.

What is the best way to enumerate running services during network reconnaissance?

Enumerating running services during network reconnaissance is performed here using aggressive service detection and default nmap scripts. This approach detects service versions to gather deeper insight into target machines.

Can I use gobuster and feroxbuster for web directory busting after a port scan?

Yes, you can use gobuster and feroxbuster for web directory busting. Following the initial port scan, the Skill utilizes these tools alongside ffuf to scan web servers for hidden directories and files.

Do I need to install nmap and curl to perform active network reconnaissance?

Yes, you need nmap and curl installed, along with other dependencies like gobuster, feroxbuster, ffuf, smbclient, enum4linux, whatweb, and nikto to execute the full range of active network reconnaissance tasks.

What is the difference between a top-1000 port scan and a full port scan?

A top-1000 port scan quickly checks the most common ports for rapid service detection, while a full port scan queries all 65,535 TCP ports. Both scanning methods are supported for comprehensive network enumeration.