Enumerate DNS records and assess email security for authorized domains.
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill recon-dns
Please help me install this Agent Skill. Skill: recon-dns Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/recon-dns Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill recon-dns
This skill addresses the complexity of manual DNS enumeration and email security verification by providing a structured, policy-gated workflow for authorized security assessments.
Use the recon-dns skill to perform a full DNS reconnaissance and email security audit for the authorized domain example.com.
High-intent search queries and answers about installing and using this skill.
DNS reconnaissance identifies subdomain takeover risks by analyzing CNAME chains against known cloud service patterns, detecting dangling DNS records that allow attackers to claim inactive subdomains.
DNS zone transfer attempts during a security audit involve querying a domain's authoritative DNS servers to request a full zone dump, which must be performed within strict authorization boundaries and rate-limiting policies.
Subdomain brute-forcing requires strict adherence to authorization gates, meaning you must have explicit permission to test the target domain and apply rate-limiting policies to avoid disrupting services.
DNSSEC status verification works during record enumeration by querying for specific DNSSEC records like RRSIG and DNSKEY to determine if a domain has chain of trust signatures enabled to prevent DNS spoofing.
Automated DNS reconnaissance is limited by defined scope boundaries and rate-limiting policies, requiring explicit authorization gates before testing zone transfers or brute-forcing subdomains to ensure compliant evidence-based reporting.
salmanabdurrahmanAutomate web content enumeration and directory discovery across authorized in-scope targets.
salmanabdurrahmanAudits SMTP endpoints for STARTTLS, open-relay, and user enumeration risks.
AeonDaveScan networks for hosts, ports, services, and operating systems.
AeonDaveResolve DNS records and brute-force subdomains from domain lists.
