Perform passive and active infrastructure reconnaissance using DNS, WHOIS, and IPInfo.
npx skills add https://github.com/luisgustavooliveira/skills --skill recon-luisgustavooliveira
Please help me install this Agent Skill. Skill: Recon Source: https://github.com/luisgustavooliveira/skills/tree/main/Recon Command: npx skills add https://github.com/luisgustavooliveira/skills --skill recon-luisgustavooliveira
This Skill provides comprehensive reconnaissance capabilities for infrastructure and networks, enabling in-depth analysis and mapping of technical assets.
Use the recon skill to perform a passive domain reconnaissance on example.com.
High-intent search queries and answers about installing and using this skill.
Network reconnaissance combines passive intelligence gathering from public sources like WHOIS and DNS with authorized active scanning for port detection and service fingerprinting. This Skill executes both phases to map technical assets and identify attack surfaces for infrastructure domains.
OSINT infrastructure mapping utilizes WHOIS lookups, DNS queries, certificate transparency logs, and IPInfo API geolocation. These passive reconnaissance techniques identify domains, IP addresses, and ASN associations to map a target company's technical infrastructure footprint.
Yes, an IPInfo API key is required to retrieve geolocation and Autonomous System number details during security assessments. The Skill depends on this external service alongside system tools like dig, nslookup, and httpx for comprehensive infrastructure analysis.
Yes, naabu and httpx are integrated dependencies for authorized active reconnaissance. Naabu executes port scanning while httpx performs technology fingerprinting and service detection to map exposed infrastructure components.
Active scanning limitations include requiring explicit authorization to avoid legal issues and potential service disruption. Passive intelligence gathering relies on public sources like DNS and WHOIS, offering threat intelligence without directly interacting with the target infrastructure.
DNS reconnaissance with dig and nslookup queries domain name servers to extract records mapping network infrastructure. This passive technique identifies subdomains, IP addresses, and mail servers, providing foundational data for security assessments and threat intelligence.
RooseveltAdvisorsAutomate network reconnaissance for domains, IPs, and netblocks.
msandbuAutomates security analysis of honeypot servers by querying failed connections and enriching IPs with threat intelligence.
phatblatAutomate infrastructure and network reconnaissance for domains, IPs, and netblocks.
BrownFineSecurityIdentify open ports and enumerate network services with Nmap.
