skills.rest
locdinh209
locdinh209COMMUNITY
Explore all skills by this author →
WebsiteGitHub

Red Team Tools and Methodology

Automate red team reconnaissance, vulnerability discovery, and API enumeration for domains and IP ranges.

Updated Mar 26, 2026
Search Tags:#security#reconnaissance#vulnerability discovery#red teaming#bug bounty hunting
One-click install
npx skills add https://github.com/locdinh209/curation-skills --skill red-team-tools-and-methodology-locdinh209
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Red Team Tools and Methodology
Source: https://github.com/locdinh209/curation-skills/tree/main/red-team-tools
Command: npx skills add https://github.com/locdinh209/curation-skills --skill red-team-tools-and-methodology-locdinh209

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires amass, subfinder, httpx, ffuf, nuclei, dalfox, gau, whatweb, waybackurls, paramspider, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps users automate and streamline the process of red teaming, bug bounty hunting, and security research by leveraging a suite of methodologies and tools from leading experts.

Core Features & Use Cases

  • Automated Reconnaissance: Enumerate subdomains, identify live hosts, and fingerprint technologies.
  • Vulnerability Scanning: Discover vulnerabilities, attack vectors, and common CVEs.
  • API Enumeration: Detect hidden methods, auth issues, and exposed endpoints.
  • XSS Hunting: Automate the process of finding Cross-Site Scripting vulnerabilities.
  • Use Case: For security researchers or bug bounty hunters looking to quickly perform a comprehensive security audit on a target application.

Quick Start

Run the recon script for the target domain 'example.com' to start the automated reconnaissance process.

Frequently Asked Questions about Red Team Tools and Methodology

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reconnaissance and subdomain enumeration for a target domain?▼

To automate security reconnaissance, you can use this Skill to run subdomain enumeration, identify live hosts, and fingerprint technologies. It leverages tools like amass and subfinder to streamline the process for target domains.

What is the best way to hunt for XSS vulnerabilities during bug bounty hunting?▼

The best way to hunt for XSS vulnerabilities is to automate the process using dedicated tools. This Skill integrates dalfox to automate finding Cross-Site Scripting vulnerabilities across discovered endpoints.

Can I use this methodology to discover hidden API endpoints and authentication issues?▼

Yes, you can use this methodology to discover hidden API endpoints and authentication issues. The Skill performs API enumeration using tools like gau and paramspider to detect exposed endpoints and hidden methods.

Do I need a specific environment to run these red teaming and vulnerability discovery scripts?▼

Yes, you need a Linux-based attack machine to run these red teaming and vulnerability discovery scripts. The Skill requires various security tools like httpx, ffuf, and nuclei to be installed in the environment.

How does content discovery and vulnerability scanning work for IP ranges?▼

Content discovery and vulnerability scanning for IP ranges works by chaining tools to identify live hosts and then scanning them. This Skill uses ffuf for content discovery and nuclei to find common CVEs and attack vectors.

Related Skills

Explore More Software Engineering Skills→
jassicsjassics
6

osint-footprinting

Map an organization's external attack surface from public DNS, WHOIS, and scan datasets.

Community
Intermediate
mindfortaimindfortai
16

finding-review

Triage cybersecurity findings for validity, exploitability, impact, and evidence quality.

Official
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced
EntroVyxEntroVyx
3

zimbra-attack

Scan Zimbra Collaboration Suite instances for vulnerabilities and exposed endpoints.

Community
Advanced