Red Team Tools and Methodology

Automate reconnaissance, subdomain enumeration, and vulnerability scanning with red team tools.

Updated Jan 8, 2026

Search Tags:#reconnaissance #subdomain enumeration #red team #vulnerability scanning #bug bounty #security research

Ready to run

npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill red-team-tools-and-methodology-andyanh174

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Red Team Tools and Methodology
Source: https://github.com/AndyAnh174/BanThuoc-SEO/tree/main/.agent/skills/red-team-tools
Command: npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill red-team-tools-and-methodology-andyanh174

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of reconnaissance and vulnerability discovery for bug bounty hunting and red teaming, streamlining complex workflows and identifying potential security weaknesses.

Core Features & Use Cases

Comprehensive Subdomain Enumeration: Discover all subdomains associated with a target.
Live Host Discovery & Fingerprinting: Identify active hosts and their technologies.
Vulnerability Scanning: Utilize tools like Nuclei for automated vulnerability detection.
Use Case: A security researcher needs to perform initial reconnaissance on a new bug bounty target. This Skill can automate the discovery of subdomains, identify live hosts, fingerprint their technologies, and run initial vulnerability scans to quickly identify potential attack vectors.

Quick Start

Use the red team tools skill to perform subdomain enumeration for the target domain example.com.

Frequently Asked Questions about Red Team Tools and Methodology

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate subdomain enumeration and vulnerability scanning for bug bounty hunting?▼

Automate subdomain enumeration and vulnerability scanning by orchestrating tools like Amass, Subfinder, httpx, ffuf, and Nuclei. This Skill streamlines complex red team workflows to quickly identify potential security weaknesses and attack vectors for new targets.

Do I need a specific environment to run red team reconnaissance tools?▼

Yes, effective execution of red team reconnaissance requires a Linux-based environment. You must also ensure specific tool installations like Amass, Subfinder, httpx, ffuf, and Nuclei are properly set up before running the automated workflows.

What is the best way to discover live hosts and fingerprint their technologies during reconnaissance?▼

The best way to discover live hosts and fingerprint technologies is by using automated toolchains. This Skill orchestrates httpx to identify active hosts and fingerprint their underlying technologies, streamlining the initial reconnaissance phase for security research.

Can I use Nuclei for automated vulnerability detection on newly discovered subdomains?▼

Yes, you can use Nuclei for automated vulnerability detection. This Skill incorporates Nuclei to scan live hosts discovered during the subdomain enumeration phase, helping security researchers quickly identify potential security weaknesses.

How does automated reconnaissance streamline the workflow for red teaming and security research?▼

Automated reconnaissance streamlines red teaming by orchestrating multiple security tools into a single workflow. It eliminates manual steps for subdomain discovery, live host identification, and vulnerability scanning, allowing rapid identification of attack vectors.

What limitations should I expect when using automated red team toolchains for security research?▼

Limitations include strict dependency on a Linux-based environment and specific tool installations like Amass and Nuclei. Without these prerequisites properly configured, the automated reconnaissance and vulnerability discovery workflows will not execute effectively.