recon

Name: recon
Availability: InStock
Author: chainreactors

Enumerate OS, users, network, and processes into a structured reconnaissance report.

482|68|Updated Sep 5, 2023

Search Tags:#reconnaissance #system-info #network #inventory #forensics #processes #incident-response

Ready to run

npx skills add https://github.com/chainreactors/malice-network --skill recon-chainreactors

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: recon
Source: https://github.com/chainreactors/malice-network/tree/main/helper/intl/community/resources/skills/recon
Command: npx skills add https://github.com/chainreactors/malice-network --skill recon-chainreactors

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the collection of host system information, user accounts, network details, and running processes to deliver a comprehensive, structured reconnaissance report.

Core Features & Use Cases

Host & OS Discovery: Detects OS version, architecture, hostname, and kernel details.
User & Group Enumeration: Lists local users, groups, and recent logins.
Network & Process Inventory: Captures interfaces, IPs, routes, DNS, connections, listening ports, and processes with ownership.
Use Case: Incident response or asset inventory where rapid, repeatable recon is required.

Quick Start

Invoke recon on a target system to produce a structured summary of OS, users, network, and processes.

Frequently Asked Questions about recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate system reconnaissance for incident response across different operating systems?▼

Automated system reconnaissance detects the target OS automatically and runs per-task commands to enumerate system information, users, network details, and processes. It works across Linux, macOS, and Windows environments to produce a structured summary for incident response without requiring changes or installs.

What information is collected during a host system inventory and reconnaissance scan?▼

A host system inventory collects OS version, architecture, hostname, and kernel details. It also enumerates local users, groups, recent logins, network interfaces, IPs, routes, DNS, listening ports, connections, and running processes with ownership details in a structured report.

Can I run network and process enumeration on macOS and Windows without installing additional software?▼

Yes, network and process enumeration runs without installing additional software on macOS and Windows. It executes per-task commands natively without chaining, avoids system changes, and directly outputs a structured reconnaissance summary of interfaces, connections, and processes.

What's the best way to capture listening ports and running processes for an asset discovery task?▼

The best way to capture listening ports and running processes for asset discovery is to invoke an automated reconnaissance tool. It records connections, listening ports, and process ownership alongside host and user data into a final structured report suitable for security assessments.

Does system reconnaissance for incident response modify the target system or chain commands together?▼

System reconnaissance for incident response does not modify the target system or chain commands together. It runs isolated per-task commands to gather forensics and inventory data, ensuring the environment remains completely unchanged while producing a structured summary.