network-assess

Map internal networks and enumerate hosts, services, and VLANs with network tools.

13|1|Updated Feb 4, 2026
One-click install
npx skills add https://github.com/0x0pointer/skills --skill network-assess
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: network-assess
Source: https://github.com/0x0pointer/skills/tree/main/network-assess
Command: npx skills add https://github.com/0x0pointer/skills --skill network-assess

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The skill helps security teams identify, map, and assess internal networks to reveal segmentation weaknesses, exposed services, and potential audit gaps.

Core Features & Use Cases

  • Detect VLAN hopping, ARP spoofing, and broadcast protocol abuse, and map trust boundaries across the network.
  • Enumerate hosts, services, shares, and network infrastructure to produce a topology and actionable findings.
  • Ideal for internal assessments, red-team exercises, and blue-team hardening across multi-VLAN environments.

Quick Start

Describe the target CIDR, depth, run host discovery and service enumeration to generate a network diagram and findings.

Frequently Asked Questions about network-assess

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map internal networks to find segmentation weaknesses and exposed services?

To map internal networks and expose weaknesses, you need to run host discovery and service enumeration across your target CIDR. This process identifies trust boundaries, detects VLAN hopping, and reveals exposed services to produce actionable topology findings.

What is the best way to enumerate hosts and services across multi-VLAN enterprise networks?

The best way to enumerate hosts across multi-VLAN environments is by applying network mapping techniques during red-team exercises or blue-team hardening. This reveals segmentation weaknesses and exposes services across the entire enterprise network infrastructure.

Do I need nmap and arp-scan installed to perform internal network assessments?

Yes, you need access to network tools such as nmap, arp-scan, nbtscan, snmpwalk, onesixtyone, smbmap, nfs-common, masscan, hping3, and netexec to perform internal network assessments and fully map the target infrastructure.

Can I detect VLAN hopping and ARP spoofing during an internal network assessment?

Yes, you can detect VLAN hopping, ARP spoofing, and broadcast protocol abuse during an internal network assessment. The process maps trust boundaries across the network to identify these segmentation weaknesses and infrastructure vulnerabilities.

How does network enumeration help with blue-team hardening across VLANs?

Network enumeration helps blue-team hardening by mapping trust boundaries and exposing services across VLANs. It produces a network topology and actionable findings that reveal audit gaps and potential infrastructure weaknesses for remediation.

What limitations should I expect when running masscan and netexec for host discovery?

When using tools like masscan and netexec for host discovery, limitations depend on your described target CIDR and scan depth. Proper network segmentation and firewall rules may restrict enumeration, requiring adjusted depth to accurately map exposed services.