Recon

What problem does it solve?

This Skill provides structured infrastructure and network reconnaissance to help security teams quickly map an organization’s attack surface—domains, IPs, netblocks, and ASNs—using both passive sources and authorized active methods.

Core Features & Use Cases

• Passive Domain & IP Recon: WHOIS, DNS enumeration, certificate transparency, and OSINT aggregation to identify assets.
• Active Recon (Authorized): Port scanning, service detection, and vulnerability probing only when proper authorization exists.
• Attack Surface Mapping: Builds a structured map of domains, subdomains, IP mappings, and ASN ownership to guide pentest planning and risk assessment.
• Use Case: Before a security assessment, you run Recon on a target to discover all assets and endpoints, producing a centralized inventory for further testing.

Quick Start

• Activate passive recon on example.com: Do passive recon on example.com.
• Map infrastructure for a domain: Recon domain example.com to enumerate domains, IPs, and ASNs.
• Report location: Output is stored under ~/.opencode/MEMORY/WORK/{current_work}/scratch/recon-example-com/