reconnaissance

Automate pentest reconnaissance by running Nmap, WhatWeb, FFUF, and Katana scans to identify open ports, technology stacks, and directories. The workflow automatically saves all discovered endpoints and observations directly to the agent's notebook for integrated documentation.

The best way to enumerate directories and crawl web content is using FFUF for directory enumeration and Katana for web crawling. This active scanning approach gathers target information systematically while automatically recording findings in the agent's notes.

Yes, you need Nmap and WhatWeb installed separately to scan open ports and identify technology stacks. The workflow requires access to Nmap, WhatWeb, FFUF, and Katana to execute the active scanning automation functions properly.

Yes, manual reconnaissance includes step-by-step browser interaction and source analysis. The skill guides manual information gathering while using the agent's note-taking utilities to record observations alongside active scanning results.

Yes, the reconnaissance workflow identifies technology stacks and open ports simultaneously. Nmap scans open ports while WhatWeb identifies the technology stack, and FFUF and Katana enumerate directories and crawl web content in a single structured workflow.

Limitations include requiring local access to Nmap, WhatWeb, FFUF, and Katana tools. The workflow focuses on active scanning and manual recon guidance but depends on the agent's note-taking utilities for documentation, meaning external note formats are not directly supported.