network-recon

Discover live hosts, scan open ports, and fingerprint operating systems.

253|37|Updated Feb 22, 2026

Search Tags:#discovery #network #enumeration #nmap #scan #recon

Ready to run

npx skills add https://github.com/blacklanternsecurity/red-run --skill network-recon

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: network-recon
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/network/network-recon
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill network-recon

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps penetration testers discover live hosts on a network, identify open ports and running services, and fingerprint the operating systems of target machines.

Core Features & Use Cases

Host Discovery: Identifies live hosts within a specified IP range using various probing techniques.
Port Scanning: Scans identified hosts for open TCP and UDP ports.
Service & OS Fingerprinting: Attempts to identify the services running on open ports and the operating system of the target host.
Use Case: When starting an engagement, use this skill to get a comprehensive map of the internal network, identifying all active machines and the services they expose, which informs subsequent attack paths.

Quick Start

Scan the network 192.168.1.0/24 for live hosts and open ports.

Frequently Asked Questions about network-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is network reconnaissance and when do I need to scan for open ports?▼

Network reconnaissance discovers live hosts and open ports to map active machines and exposed services. You need it at the start of a penetration test to identify attack surfaces and inform subsequent exploitation paths across a target IP range.

How do I perform host discovery and port scanning for an internal network?▼

Perform host discovery and port scanning by targeting a specified IP range to identify live machines and open TCP or UDP ports. This skill probes the network to generate a comprehensive port and service map for orchestrator-driven enumeration.

Can I identify running services and fingerprint operating systems during a network scan?▼

Identify running services and fingerprint operating systems by analyzing responses from open ports. The skill attempts to detect specific services and the underlying OS of target machines to provide a detailed map of the network environment.

Does network reconnaissance support tunneled or pivot scanning scenarios?▼

Network reconnaissance supports both direct and tunneled scans, including specific protocols for handling privileged commands and pivot scanning scenarios. This allows enumeration across segmented networks while maintaining proper privilege escalation.

What is the best way to map an internal network for a penetration testing engagement?▼

Map an internal network by running comprehensive host discovery, port scanning, and OS fingerprinting against the target subnet. This generates a detailed port and service map, identifying all active machines and exposed services to guide your attack paths.