メニュー
Network reconnaissance via host discovery, port scanning, and service fingerprinting. Use during early reconnaissance phase to map attack surface and identify services.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Cloud infrastructure, container image, and Kubernetes security assessment via IAM review, secrets detection, and RBAC analysis.
Exploit lookup, payload generation, and delivery for confirmed vulnerabilities. Use only after validation has established concrete attack path.
Curated MCP prompts for multi-step attack chains and engagement playbooks. Use for guided workflows spanning multiple skills. Each prompt step now carries expected_time, priority, fallback, and result_context for agent-guided execution.
SMB service enumeration, share discovery, and RPC interrogation on Windows networks. Use to map Windows hosts before credential testing or lateral movement.
Wireless network assessment via monitor mode, handshake capture, and de-authentication testing. Use to assess WiFi security posture and crack WPA/WPA2.
Active Directory reconnaissance, privilege escalation path analysis, and Kerberos attack surface mapping. Use for domain exploitation and lateral movement.
| name | nmap-recon |
| description | Network reconnaissance via host discovery, port scanning, and service fingerprinting. Use during early reconnaissance phase to map attack surface and identify services. |
Use this skill in Phase 1: Reconnaissance when the objective is network-layer intelligence:
Staged scanning minimizes noise and false positives:
arp_scan (subnet), masscan (fast port sweep), or rustscan (dual-mode)nmap -sCV on confirmed ports (versions + scripts)nmap_advanced only on services requiring deeper interrogation (e.g., SMB, LDAP, HTTP)Entry point:
nmap(target="10.10.10.0/24", ports="22,80,443,445", scan_type="-sCV")
-T1 to -T2 reduce detection; avoid -T5 in monitored networksweb-recon, smb-enum, or active-directory