skills.rest
SensLiao
SensLiaoCOMMUNITY
Explore all skills by this author →
GitHub

security-pentest-recon-scan

Execute authorized reconnaissance and vulnerability scanning with CLI tools.

Updated May 28, 2026
Search Tags:#reconnaissance#vulnerability scanning#security compliance#security pentest#authorized scan
One-click install
npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-pentest-recon-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-pentest-recon-scan
Source: https://github.com/SensLiao/Claude-code-setting/tree/main/skills/security-pentest-recon-scan
Command: npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-pentest-recon-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides authorized reconnaissance and vulnerability scanning for security penetration tests, ensuring compliance with security standards and protocols.

Core Features & Use Cases

  • Authorized Reconnaissance: Perform reconnaissance and vulnerability scanning with strict adherence to predefined security standards and guidelines.
  • Vulnerability Scanning: Utilize OSS CLIs for vulnerability scanning without exploitation or destructive actions.
  • Use Case: For security professionals conducting authorized penetration tests, this Skill can be used to scan for vulnerabilities on a given target, ensuring compliance with the agreed-upon scope and standards.

Quick Start

To initiate a recon and scan, say "Start authorized recon and scan for the target domain example.com".

Frequently Asked Questions about security-pentest-recon-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform authorized vulnerability scanning that complies with NIST SP 800-115 and OWASP WSTG standards?▼

Authorized vulnerability scanning compliant with NIST SP 800-115 and OWASP WSTG standards is executed using specified CLI tools within a predefined scope. The process ensures strict adherence to security guidelines without exploitation or destructive actions.

What is the best way to conduct reconnaissance for a security pentest without violating scope?▼

Reconnaissance for a security pentest without violating scope requires executing authorized scans within predefined boundaries. This approach ensures compliance with PTES and OSSTMM standards while strictly preventing unauthorized access or destructive testing actions.

How do I start an authorized recon and scan for a specific target domain?▼

To start an authorized recon and scan for a target domain, you initiate the process by requesting a scan for your specific target. The Skill then executes reconnaissance using specified OSS CLIs within the agreed-upon scope and security guidelines.

Can I use this approach for security compliance checks on external targets?▼

Yes, you can use this approach for security compliance checks on external targets. It applies directly to security penetration testing workflows where authorized scanning is required, ensuring compliance with agreed-upon scopes and predefined security protocols.

Does authorized reconnaissance and vulnerability scanning include exploitation or destructive actions?▼

Authorized reconnaissance and vulnerability scanning does not include exploitation or destructive actions. It strictly utilizes OSS CLIs for vulnerability scanning to ensure compliance with security standards and protocols without causing harm or unauthorized access.

What security standards and protocols does this vulnerability scanning method support?▼

This vulnerability scanning method supports compliance with PTES, OSSTMM, NIST SP 800-115, and OWASP WSTG standards. It ensures authorized reconnaissance adheres to strict security guidelines throughout the penetration testing workflow.

Related Skills

salmanabdurrahmansalmanabdurrahman

recon-dns

Enumerate DNS records and assess email security for authorized domains.

Community
Advanced
dapperdiversdapperdivers
1

report-generator

Generate structured markdown penetration test reports from JSON security scan findings.

Community
Intermediate
BishopCodesBishopCodes
1

WebAssessment

Automate web application security assessments with OWASP testing and browser automation.

Community
Advanced
SensLiaoSensLiao

pentest-scope-and-roe

Prepare and review Rules of Engagement for security testing activities.

Community
Advanced