infosec-suite

Interactive security engagement planner. Guides the operator through target definition, scope, methodology selection, and rules of engagement. Produces engagement-plan.json and creates the session directory. Must be run before /infosec-recon and /infosec-vuln-scan.

Reconnaissance skill. Multi-source passive subdomain enumeration (subfinder, crt.sh, HackerTarget/DNSDumpster), OSINT intelligence gathering (GitHub exposure, phonebook.cz email discovery), live host probing (httpx), WAF detection (wafw00f), port scanning (nmap), tech detection (nuclei), IDOR flagging, and asset classification. Produces findings-recon.json.

Check for InfoSec-Suite updates and apply them. Shows what changed between local and remote, re-runs setup if tool installations changed.

Vulnerability scanning skill. Reads findings-recon.json from /infosec-recon, selects nuclei templates based on detected tech and engagement type, runs targeted vuln scanning, classifies findings by severity, and produces findings-vulns.json. Handles cloud credential verification for cloud engagements.