skills.rest
cmndcntrlcyber
cmndcntrlcyberCOMMUNITY
Explore all skills by this author →
GitHub

project-discovery-workflow

Automate project discovery with a 4-phase pipeline for asset enumeration, fingerprinting, vulnerability scanning, and alerting.

3|Updated Nov 12, 2025
Search Tags:#reconnaissance#project discovery#red team#pentest#recon pipeline
One-click install
npx skills add https://github.com/cmndcntrlcyber/rtpi --skill project-discovery-workflow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: project-discovery-workflow
Source: https://github.com/cmndcntrlcyber/rtpi/tree/main/knowledge_seed/project-discovery-workflow
Command: npx skills add https://github.com/cmndcntrlcyber/rtpi --skill project-discovery-workflow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subfinder, naabu, katana, cloudlist, uncover, alterx, httpx, dnsx, tlsx, nuclei, interactsh, cvemap, notify, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill solves the problem of efficiently discovering and reconnoitering projects, providing a comprehensive 4-phase pipeline that covers discovery, enrichment, detection, and notification.

Core Features & Use Cases

  • 4-Phase Pipeline: Discover, Enrich, Detect, Notify - an organized approach to reconnaissance.
  • Toolchain Integration: Integrates with a suite of tools like subfinder, naabu, katana, cloudlist, and more.
  • Customization: Tailored for bug-bounty or pentest recon pipelines, and troubleshooting specific tools.
  • Use Case: For example, when setting up a bug bounty or pentest recon pipeline, this Skill can be used to streamline the process and improve efficiency.

Quick Start

To start the discovery phase, run: subfinder -d target.com -all -recursive -silent | tee subs.txt

Frequently Asked Questions about project-discovery-workflow

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a recon pipeline for red team operations?▼

A pentest recon pipeline is structured into four phases: discover, enrich, detect, and notify. It chains tools like subfinder for subdomain enumeration, naabu for port scanning, and nuclei for vulnerability scanning to systematically identify and assess target assets.

How do I set up a bug bounty recon pipeline with subfinder and nuclei?▼

Yes, you can use this recon pipeline for bug bounty hunting as it is specifically tailored for that use case. It automates asset discovery and vulnerability scanning across target domains, improving efficiency during security assessments.

What is the best way to structure a reconnaissance workflow for penetration testing?▼

The best way to structure penetration testing reconnaissance is through a phased pipeline: discovery, enrichment, detection, and notification. This method organizes tasks from initial subdomain finding with subfinder to vulnerability scanning with nuclei and final alerting.

Does this recon pipeline require specific tools like katana and httpx to run?▼

The reconnaissance pipeline integrates tools like uncover and cvemap for vulnerability detection and mapping. Additionally, it uses notify to handle the final alerting phase, ensuring you receive notifications when vulnerabilities or exposed assets are detected.

Related Skills

Explore More Software Engineering Skills→
jayjpatel9717jayjpatel9717

Recon & Attack Surface Mapping

Map attack surfaces via DNS enumeration, port scanning, and vulnerability assessment.

Community
Advanced
chenchunrunchenchunrun
1

redteam-intrusion-hunter

Automate vulnerability discovery and validation across web and service surfaces.

Community
Advanced
Muath2000Muath2000

attack-surface-analyst

Discover and monitor internet-facing assets for external attack surface management.

Community
Advanced
chainreactorschainreactors
235

gogo

Automate network reconnaissance to identify live hosts, open ports, and service fingerprints.

Official
Intermediate