nmap-recon

Performs scoped host reconnaissance with Nmap to identify open ports and services.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/0X6C7879/aegissec --skill nmap-recon-0x6c7879
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nmap-recon
Source: https://github.com/0X6C7879/aegissec/tree/main/skills/nmap-recon
Command: npx skills add https://github.com/0X6C7879/aegissec --skill nmap-recon-0x6c7879

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill enables safe, scope-limited network reconnaissance by using the bundled Nmap tool to identify open ports, services, and basic host characteristics on authorized targets.

Core Features & Use Cases

  • Conservative scanning: Focuses on essential discovery with controlled scope and minimal impact.
  • Service and OS information: Provides service version data and OS guesses when requested.
  • Audit-ready artifacts: Records outputs to artifacts and logs for traceability and review.

Quick Start

Begin with a targeted, conservative scan of an authorized host using the bundled nmap-recon workflow.

Frequently Asked Questions about nmap-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform network scanning for open ports and services on authorized hosts?

Network scanning for open ports and services on authorized hosts is performed using a bundled Nmap distribution that enforces scope restrictions and validates targets before executing conservative port scans.

Can I use Nmap to detect operating systems and service versions during host reconnaissance?

Yes, Nmap host reconnaissance supports service version detection and OS inference when requested, providing service version data and operating system guesses for validated targets.

Does this network scanning approach support custom port selection like --top-ports or --ports?

Yes, the network scanning approach supports both --top-ports and --ports parameters, allowing targeted port selection while maintaining conservative scanning within a defined scope.

How are scan results recorded for audit during host reconnaissance?

Host reconnaissance records all scan outputs to artifacts and logs, creating audit-ready documentation that ensures traceability and review of the port and service detection results.

What are the limitations of conservative network scanning for host discovery?

Conservative network scanning is limited to low-risk host discovery and enumeration tasks within a defined scope, focusing on essential discovery with controlled scope and minimal impact rather than aggressive scanning techniques.