skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

recon-playbook

Orchestrates a 4-phase reconnaissance pipeline for WordPress vulnerability scoring across large-scale domain lists.

3|1|Updated Jul 2, 2026
Search Tags:#automation#security#vulnerability#reconnaissance#pentesting#wordpress
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-playbook-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-playbook
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/meta/recon-playbook
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill recon-playbook-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, nmap, python3, masscan, subfinder, httpx, nuclei, jq, and includes references (resource) components.

What problem does it solve?

This Skill solves the inefficiency of manual reconnaissance by providing a structured, 4-phase pipeline that maximizes findings per minute across large domain batches.

Core Features & Use Cases

  • 4-Phase Pipeline: Automates target generation, quick filtering, deep WordPress analysis, and invasive scanning.
  • Empirical Optimization: Includes battle-tested threading limits, rate-limiting evasion techniques, and severity scoring.
  • Use Case: When tasked with a new engagement, use this Skill to rapidly identify high-value targets from a list of thousands, ensuring you focus your manual effort only on the most vulnerable assets.

Quick Start

Execute the recon-playbook skill to initiate the 4-phase pipeline on your target list located at /root/output/targets.txt.

Frequently Asked Questions about recon-playbook

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate reconnaissance and vulnerability scoring for large domain lists?▼

Automating reconnaissance for large domain lists requires a multi-phase pipeline that handles target generation, quick filtering, deep analysis, and invasive scanning to score vulnerabilities and prioritize targets.

What is the best way to run parallel reconnaissance without triggering rate limits?▼

Running parallel reconnaissance without triggering rate limits involves applying battle-tested threading limits and rate-limiting evasion techniques during execution to safely maximize findings per minute.

How do I prioritize vulnerable WordPress targets during pentesting engagements?▼

Prioritizing vulnerable WordPress targets requires executing deep-dive WordPress analysis on a filtered list to identify high-value assets, ensuring manual effort focuses only on the most vulnerable infrastructure.

Do I need to install nmap and nuclei to perform automated vulnerability scanning?▼

Yes, performing automated vulnerability scanning requires installing dependencies like nmap and nuclei, alongside curl, python3, masscan, subfinder, httpx, and jq to orchestrate the full pipeline.

Can I use this approach for rapid target prioritization across thousands of domains?▼

Yes, this approach supports rapid target prioritization across thousands of domains by processing a target list through a 4-phase pipeline to maximize findings per minute and identify high-value assets.

Why does manual reconnaissance fail to identify high-value targets efficiently?▼

Manual reconnaissance fails to identify high-value targets efficiently due to lack of structured automation, parallel execution, and severity scoring needed to process large-scale domain batches rapidly.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

gitlab-public-recon

Enumerate public GitLab projects and extract sensitive configuration files and CI/CD variables.

Community
Intermediate
NITISH-gitbitNITISH-gitbit

web-pentest

Automate web application penetration testing with vulnerability discovery, exploitation, and reporting.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced
EntroVyxEntroVyx
3

port-mass-scan

Execute high-speed port scanning and service enumeration across large IP ranges.

Community
Advanced