Automate security reconnaissance of domains, IPs, and netblocks.
npx skills add https://github.com/verrio1/vaughn-pai --skill recon-verrio1
Please help me install this Agent Skill. Skill: Recon Source: https://github.com/verrio1/vaughn-pai/tree/main/skills/Recon Command: npx skills add https://github.com/verrio1/vaughn-pai --skill recon-verrio1
The Recon skill provides a structured approach to gather public-domain intelligence and map an organization's network perimeter, enabling faster threat assessments and targeted testing.
To begin, request: "Recon domain example.com" to generate a domain infrastructure map, then review the scratch/work reports.
High-intent search queries and answers about installing and using this skill.
Attack surface mapping using OSINT automates the discovery of public-facing domains, subdomains, IPs, and netblocks to reveal infrastructure vulnerabilities. It surfaces hosting providers and attribution data for faster threat assessments.
Passive reconnaissance gathers public-domain intelligence without directly interacting with the target's network. It maps ASN data, netblocks, and subdomains to support audits and threat assessment while maintaining stealth.
Enumerate subdomains and netblocks by requesting reconnaissance on a target domain. The process produces structured outputs detailing the infrastructure map, which integrates with reporting and logging systems for pentest engagements.
Yes, authorized active probing is supported alongside passive gathering for infrastructure mapping. It produces clear audit trails and structured outputs to ensure compliance during targeted pentest engagements.
Yes, the reconnaissance outputs are structured to integrate directly with reporting, logging, and workflow systems. This supports audits and pentest engagements by providing actionable infrastructure maps and threat assessment data.
phatblatAutomate infrastructure and network reconnaissance for domains, IPs, and netblocks.
bpnrockstarAutomate bug bounty hunting from reconnaissance through exploitation and reporting.
hoanghn61Map IP addresses to cloud providers, ASNs, and organizations via DNS and WHOIS.
valITinoCollect passive OSINT data on target domains via public sources.
