internal-network-assessment

Conduct read-only network discovery and service enumeration within defined CIDR and VLAN boundaries.

Updated Jul 30, 2026

Search Tags:#compliance #enumeration #network-discovery #active-directory #pentest #security-assessment

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill internal-network-assessment

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: internal-network-assessment
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/internal-network-assessment
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill internal-network-assessment

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, safe, and policy-compliant framework for conducting internal network discovery and service enumeration without triggering security alerts or violating operational boundaries.

Core Features & Use Cases

Scope-Bound Discovery: Performs ARP, ICMP, and TCP-SYN host discovery strictly within authorized CIDR ranges and VLANs.
Read-Only Enumeration: Executes non-intrusive service version detection and Active Directory read-only LDAP queries to map domain topology.
Use Case: Use this skill to perform a baseline security assessment of a new internal network segment to identify exposed management interfaces, default-credential databases, or cleartext services before a full-scale audit.

Quick Start

Use the internal-network-assessment skill to perform a low-impact discovery scan on the 10.0.5.0/24 subnet using the provided scope configuration.

Frequently Asked Questions about internal-network-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform low-impact internal network discovery without triggering security alerts?▼

Low-impact internal network discovery requires authorized, read-only scanning techniques like ARP, ICMP, and TCP-SYN host discovery. This approach enforces mandatory policy gates, rate-limiting, and evidence-collection protocols to ensure operational safety and compliance while mapping network topology.

Can I enumerate Active Directory structures using read-only LDAP queries for security assessments?▼

Read-only LDAP queries facilitate non-intrusive Active Directory enumeration to securely map domain topology. This read-only enumeration approach extracts exposed service configurations and domain structures without modifying directory objects or triggering operational alerts.

What is the best way to scope a pentest to specific CIDR ranges and VLAN boundaries?▼

Scoping a pentest to specific CIDR ranges and VLAN boundaries involves configuring strict network discovery limits before execution. Scope-bound discovery ensures host detection and service version identification remain confined to authorized segments for compliance.

Does network discovery scanning support rate-limiting to prevent network disruption?▼

Network discovery scanning supports mandatory rate-limiting and policy gates to prevent disruption and avoid triggering alerts. These safety mechanisms ensure service version detection and host mapping operate with minimal impact on live environments.

How do I map exposed service configurations and cleartext services in a new network segment?▼

Mapping exposed service configurations and cleartext services requires non-intrusive service version detection across authorized subnets. This baseline security assessment identifies exposed management interfaces and default-credential databases before executing a full-scale audit.