network-recon

Network reconnaissance discovers live hosts and open ports to map active machines and exposed services. You need it at the start of a penetration test to identify attack surfaces and inform subsequent exploitation paths across a target IP range.

Perform host discovery and port scanning by targeting a specified IP range to identify live machines and open TCP or UDP ports. This skill probes the network to generate a comprehensive port and service map for orchestrator-driven enumeration.

Identify running services and fingerprint operating systems by analyzing responses from open ports. The skill attempts to detect specific services and the underlying OS of target machines to provide a detailed map of the network environment.

Network reconnaissance supports both direct and tunneled scans, including specific protocols for handling privileged commands and pivot scanning scenarios. This allows enumeration across segmented networks while maintaining proper privilege escalation.

Map an internal network by running comprehensive host discovery, port scanning, and OS fingerprinting against the target subnet. This generates a detailed port and service map, identifying all active machines and exposed services to guide your attack paths.