Automate reconnaissance to map exposed attack surfaces and identify endpoints.
npx skills add https://github.com/freire19/Mythos --skill pentest-recon
Please help me install this Agent Skill. Skill: pentest-recon Source: https://github.com/freire19/Mythos/tree/main/skills/pentest-recon Command: npx skills add https://github.com/freire19/Mythos --skill pentest-recon
It helps you quickly identify what an external target exposes—domains, endpoints, technology fingerprints, and weak security signals—so you can focus your penetration testing where it matters most.
Run the pentest-recon skill to generate a recon report for a target domain by collecting passive findings, fingerprinting exposed services, and summarizing discovered endpoints and security-header risks.
High-intent search queries and answers about installing and using this skill.
Mapping an attack surface is done by automating passive reconnaissance to discover subdomains, common paths, and exposed services, then producing a structured recon report summarizing likely endpoints and security weaknesses.
Yes, you can perform non-intrusive security header validation and web app fingerprinting by inspecting server headers and common discovery paths like robots.txt and sitemap.xml without actively exploiting the target.
Automating subdomain discovery and endpoint enumeration involves orchestrating web searches and HTTP requests to identify public assets, which generates a comprehensive output of mapped endpoints for penetration testing workflows.
Yes, pentest recon includes light vulnerability triage by performing non-intrusive validation and scanning identified endpoints to highlight weak security signals and surface mapping risks within the generated report.
Uncovering front-end and API relationships relies on browser inspection to map surface interactions, allowing you to identify how exposed front-end components connect to underlying API endpoints during reconnaissance.
Passive reconnaissance is limited to publicly exposed information and non-intrusive checks, meaning it gathers findings without direct target interaction but may not uncover vulnerabilities requiring active exploitation.
RifteoBuild a structured penetration testing engagement brief with scope and rules of engagement.
dapperdiversTest POST parameters for SQL injection, XSS, and command injection vulnerabilities.
infantesromeroadrianExecute Active Directory attacks and credential access techniques with Impacket, CrackMapExec, and Certipy.
zm2231Detect tech stacks and scan web applications for security vulnerabilities.
