Automate penetration testing reconnaissance to discover assets and attack surfaces.
npx skills add https://github.com/xijunww/Pentest --skill recon-xijunww
Please help me install this Agent Skill. Skill: recon Source: https://github.com/xijunww/Pentest/tree/main/packages/core/src/config/skills/builtin/recon Command: npx skills add https://github.com/xijunww/Pentest --skill recon-xijunww
This Skill automates the process of reconnaissance in penetration testing, enabling rapid discovery of assets, entry points, attack surfaces, and hypotheses.
Use the recon skill to perform a quick reconnaissance on the target 'example.com'.
High-intent search queries and answers about installing and using this skill.
Automated reconnaissance accelerates asset discovery in penetration testing by identifying exposed assets, entry points, and attack surfaces. This process establishes a baseline for accessible exposures including HTTP headers, framework clues, and state transitions.
Attack surface mapping identifies hidden entry points by analyzing JS routes, legacy APIs, same-level endpoints, and alternative methods. It also uncovers debug behaviors, internal identifiers, and feature flags to ensure comprehensive security assessment coverage.
Yes, input mapping tracks attacker-controllable inputs across forms, JSON fields, query parameters, headers, upload points, WebSocket messages, postMessage channels, GraphQL operations, and AI prompt inputs during security assessments.
Yes, performing automated reconnaissance requires Python libraries and tools for web scanning and network analysis to discover assets, identify potential vulnerabilities, and map attacker inputs across various surfaces.
Hypothesis generation converts observed reconnaissance results into testable assumptions for potential entry points and vulnerability types. This approach transforms mapped attack surfaces and trust boundary comparisons into actionable subsequent testing steps.
Trust boundary comparison analyzes differences between client and server checks, examining role transitions, workflow skips, object ownership, cache layers, redirects, and third-party integrations to identify potential security gaps.
gaebalaiAutomate CAN bootstrapping for Raspberry Pi vehicle diagnostics environments.
jinyimeng01Validate suspected web vulnerabilities and generate structured exploit reports.
BrownFineSecurityIdentify open ports and enumerate network services with Nmap.
pellepimAutomate security review and OWASP Top 10 vulnerability assessment for Node.js applications.
