Perform OSINT reconnaissance to build target profiles from public sources.
npx skills add https://github.com/brucesongs/kali-claw --skill recon-osint-brucesongs
Please help me install this Agent Skill. Skill: recon-osint Source: https://github.com/brucesongs/kali-claw/tree/main/skills/recon-osint Command: npx skills add https://github.com/brucesongs/kali-claw --skill recon-osint-brucesongs
Publicly available information about a target is scattered across many sources, making it hard to assemble a coherent picture for security assessments.
Trigger the OSINT workflow for a target domain to identify subdomains, exposed data, and public indicators.
High-intent search queries and answers about installing and using this skill.
OSINT reconnaissance coordinates passive and active information gathering across multiple sources to surface comprehensive target profiles, consolidating scattered public data into structured intelligence for security assessments.
Subdomain enumeration discovers underlying domains and assets associated with a target to accurately map its attack surface. It extracts domain metadata and identifies exposed assets for comprehensive security testing.
Yes, threat intelligence collection applies both passive and active gathering techniques. It synthesizes cross-source correlation to support red-team planning and risk assessment by building structured target profiles.
Technology fingerprinting analyzes target profiles by correlating data gathered across multiple sources and formats. This cross-tool correlation satisfies structured reporting requirements to identify exposed technologies and public indicators.
Trigger the OSINT workflow directly for a target domain to identify subdomains, exposed data, and public indicators. This initiates asset discovery and technology fingerprinting to build a coherent intelligence picture.
Active reconnaissance directly interacts with the target, which may trigger alerts or violate engagement rules. Use passive gathering instead when stealth is required or when assessing external assets without explicit authorization.
dreadnodeEnumerate HackerOne program scope and generate prioritized target inventories.
pdparchitectAudit Okta tenants for authentication, MFA, and API misconfigurations.
macaughDetect network services and versions on discovered hosts via active probing.
SignmanalCollect subdomains, SSL certificates, WHOIS, and DNS records as JSON.
