Automate passive reconnaissance on a target domain using public sources.
npx skills add https://github.com/hpsgd/turtlestack --skill recon-hpsgd
Please help me install this Agent Skill. Skill: recon Source: https://github.com/hpsgd/turtlestack/tree/main/plugins/engineering/security-engineer/skills/recon Command: npx skills add https://github.com/hpsgd/turtlestack --skill recon-hpsgd
Provides visibility into an organization's external exposure by aggregating publicly available information without touching the target systems, addressing the common blind spot in security assessments.
Provide a passive reconnaissance plan for a target domain using public sources only.
High-intent search queries and answers about installing and using this skill.
Passive reconnaissance gathers open-source intelligence to map an attack surface without touching target systems. It inventories subdomains, DNS records, and IP ranges to define scope and identify external exposure safely.
You enumerate subdomains and DNS records by querying open-source data sources for public indicators. This passive collection inventories assets and maps ASN details to define your engagement scope.
Yes, you can fingerprint technologies without active scanning by analyzing passive indicators from public sources. This method identifies target tech stacks while avoiding direct interaction with the systems.
Passive OSINT collection requires no external dependencies or components. It operates using access to open-source data sources to map target domains and inventory findings.
The best way to document engagement authorization is by logging the engagement authorization reference within your passive reconnaissance plan. This ensures security analysis compliance before mapping the attack surface.
You should avoid passive reconnaissance when you need to verify live vulnerabilities or internal exposure, as it only maps external surface from public sources without directly touching the systems.
ArianHobson333Generate Rules of Engagement documents from structured schema input.
swannysecValidate GitHub secret-scanning alerts against commit history and generate structured security reports.
Happy-Technologies-LLCCorrelate security incidents with events, vulnerabilities, and threat intelligence.
pauljbernardProvide implementation strategies for cybersecurity tools and frameworks.
