recon-for-sec

Route reconnaissance workflows for mapping unknown target surfaces.

5|2|Updated May 16, 2026
One-click install
npx skills add https://github.com/DorianGallo/hack-skills-local --skill recon-for-sec-doriangallo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-for-sec
Source: https://github.com/DorianGallo/hack-skills-local/tree/main/skills/recon-for-sec
Command: npx skills add https://github.com/DorianGallo/hack-skills-local --skill recon-for-sec-doriangallo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you stop guessing what to test first by turning initial access and uncertainty into a clear, repeatable recon plan.

Core Features & Use Cases

  • Scope-first routing: Converts “new target / unknown surface” into a guided reconnaissance path.
  • Asset discovery and fingerprinting: Focuses on endpoint inventory, technology fingerprinting, and high-signal observations.
  • Test-route planning: Routes findings into specialized follow-up tracks such as API security, auth issues, injection checks, and business-logic vulnerabilities.

Quick Start

Use recon-for-sec to build an endpoint inventory and choose the most promising next security testing route for your target.

Frequently Asked Questions about recon-for-sec

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is reconnaissance in security testing and when do I need it?

Reconnaissance is the structured discovery of unknown target surfaces, including asset enumeration and technology fingerprinting. You need it when facing a new target to build an endpoint inventory before routing into specialized security testing tracks.

How do I map an unknown target surface for security testing?

You map an unknown target by applying a structured, stepwise reconnaissance flow that performs in-scope discovery, asset and endpoint enumeration, and technology fingerprinting to produce a clear endpoint inventory.

What's the best way to plan a security testing route after asset discovery?

The best way to plan a security testing route is to use your endpoint inventory to route findings into specialized follow-up tracks such as API security, authentication issues, injection checking, and business-logic vulnerabilities.

Can I use this reconnaissance methodology for API security and injection checking?

Yes, this reconnaissance methodology routes your discovered assets and endpoints directly into specialized follow-up tracks covering API security, authentication issues, injection checking, and business-logic vulnerabilities.

Do I need any dependencies or components to start mapping unknown targets?

No dependencies or components are required to start mapping unknown targets. The Skill provides an entry-point router for methodology planning that converts initial access and uncertainty into a repeatable reconnaissance plan.