skills.rest
jassics
jassicsCOMMUNITY
Explore all skills by this author →
Website𝕏@jassicsGitHub

recon

Coordinates passive and active enumeration of authorized attack surfaces for penetration testing.

6|Updated May 30, 2026
Search Tags:#security testing#penetration testing#reconnaissance#enumeration#attack surface
One-click install
npx skills add https://github.com/jassics/awesome-claude-security --skill recon-jassics
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon
Source: https://github.com/jassics/awesome-claude-security/tree/main/plugins/pentester/skills/recon
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill recon-jassics

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of reconnaissance for penetration testing, providing a clear, organized attack-surface map for in-scope targets.

Core Features & Use Cases

  • Scope-Bound Reconnaissance: Enumerate the authorized attack surface, including hosts, domains, services, technologies, and exposure.
  • Passive and Active Enumeration: Gather information through passive OSINT and active enumeration with respect to scope and authorization.
  • Organized Attack Surface: Group and organize the surface by asset/zone and note technology per target for targeted testing.
  • Output Inventory: Provide an inventory of assets, types, services/tech, exposure, and in-scope status, along with a prioritized testing list.

Quick Start

Run a recon skill with the /recon:enumerate command.

Frequently Asked Questions about recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate reconnaissance for penetration testing?▼

Automate reconnaissance for penetration testing by running the /recon:enumerate command, which coordinates passive OSINT and active enumeration to map the authorized attack surface.

What is the difference between passive and active enumeration in attack surface mapping?▼

Attack surface enumeration gathers data through passive OSINT techniques and active probing, coordinating both methods to identify hosts, domains, services, and technologies within a defined, authorized scope.

Do I need explicit authorization before conducting attack surface enumeration?▼

Yes, attack surface enumeration requires explicit authorization and a defined scope before testing begins, ensuring all passive and active reconnaissance stays strictly within authorized boundaries.

How do I organize and inventory discovered assets for targeted testing?▼

Organize discovered assets by grouping the attack surface into zones and noting the technology per target, producing an output inventory that includes asset types, services, exposure, and a prioritized testing list.

Can I use this reconnaissance approach for unauthorized security testing?▼

No, this reconnaissance approach applies only to the early stages of authorized penetration testing engagements, requiring explicit scope boundaries to ensure all active and passive enumeration remains compliant.

What output inventory should I expect from an authorized reconnaissance scan?▼

An authorized reconnaissance scan outputs a structured inventory of in-scope assets, service types, detected technologies, exposure levels, and a prioritized testing list to guide subsequent penetration testing steps.

Related Skills

Explore More Software Engineering Skills→
briiirussellbriiirussell
345

recon

Enumerate external attack surface via passive and authorized active recon.

Community
Intermediate
rahmatullahbossrahmatullahboss

WordPress Penetration Testing

Scan WordPress sites for vulnerabilities and enumerate users and plugins.

Community
Intermediate
protoLabsAIprotoLabsAI
2

recon-sweep

Perform passive and scoped active reconnaissance on network targets and domains.

Official
Advanced
BrownFineSecurityBrownFineSecurity
811

nmap

Identify open ports and enumerate network services with Nmap.

Official
Advanced