transilience-reconnaissance

Automate domain assessment and web application mapping for security auditing.

Updated Jun 21, 2026
One-click install
npx skills add https://github.com/infantesromeroadrian/arca-agent --skill transilience-reconnaissance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: transilience-reconnaissance
Source: https://github.com/infantesromeroadrian/arca-agent/tree/main/template/skills/transilience-reconnaissance
Command: npx skills add https://github.com/infantesromeroadrian/arca-agent --skill transilience-reconnaissance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subfinder, nmap, httpx, python, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of domain assessment and web application mapping, discovering subdomains, ports, endpoints, APIs, and JavaScript routes, and analyzing attack surfaces.

Core Features & Use Cases

  • Subdomain Discovery: Enumeration of subdomains via passive and active sources, including passive DNS, certificate transparency, and DNS brute-forcing.
  • Port Scanning: Identification of open ports and services on targets, with options for focused scanning and version detection.
  • Service Enumeration: Version detection, banner grabbing, and protocol-specific enumeration.
  • Web Application Mapping: Active scanning for directories/files, API discovery, JavaScript & SPA analysis, and surface analysis with risk prioritization.
  • Output Generation: JSON and Markdown outputs for inventory, analysis, and raw tool outputs.
  • Use Case: For a penetration testing or security assessment, use this Skill to identify and inventory attackable services and endpoints on a target domain.

Quick Start

Use the 'transilience-reconnaissance' skill to enumerate subdomains for the domain 'example.com'.

Frequently Asked Questions about transilience-reconnaissance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate subdomain enumeration and port scanning for a domain?

To automate subdomain enumeration and port scanning, you can use this Skill to discover subdomains, open ports, and services, compiling them into an inventory and attack surface map for security auditing.

What is the best way to map a web application's attack surface for a penetration test?

Mapping a web application attack surface is best done by actively scanning for directories, APIs, and JavaScript routes, which this Skill automates to generate threat inventories and risk prioritized outputs.

Does domain assessment require Python and specific tools like nmap to work?

Yes, domain assessment requires Python and associated libraries, alongside specific tools like subfinder, nmap, and httpx, to execute subdomain discovery, port scanning, and service enumeration.

How do I discover APIs and JavaScript routes during web application mapping?

To discover APIs and JavaScript routes during web application mapping, the Skill actively scans the target domain to identify endpoints and analyze surface features for security assessment.

What output formats are generated when scanning and enumerating services?

When scanning and enumerating services, the Skill generates JSON and Markdown outputs, providing structured inventory, analysis, and raw tool outputs for security auditing purposes.

Can I use subfinder and httpx together for comprehensive domain reconnaissance?

Yes, you can use subfinder and httpx together through this Skill, which orchestrates passive DNS, certificate transparency, and active scanning to compile a comprehensive domain threat inventory.

Related Skills