Skip to main content

recon-for-sec

Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.

来源信息

仓库
Kur1sulab/blackbox
最近来源活动
2026年8月12日 15:17
检测到的 SKILL.md 语言
英语
星标
3
分支
1

安装方式

默认使用会先检查来源的 Prompt;你也可以切换为直接命令,或下载本地副本。

检查来源文件

决定是否安装前,请先阅读 SKILL.md,以及 SkillsMP 当前展示的配套文件。

正在显示 SKILL.md

SKILL.md
来源说明 · 只读预览
name
recon-for-sec
description
Entry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.
# Recon and Methodology Router This is the starting router for new targets and unknown attack surfaces. ## When to Use - You just received a new target and do not yet know what to test first - You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning - You want to build follow-up testing on structured methodology instead of random payload enumeration ## Skill Map - [Recon and Methodology](../hack-recon-and-methodology/SKILL.md) - [Insecure Source Code Management](../hack-insecure-source-code-management/SKILL.md) — .git/.svn/.hg exposure detection - [Dependency Confusion](../hack-dependency-confusion/SKILL.md) — Supply chain reconnaissance for internal package names ## Recommended Flow 1. First confirm in-scope assets and target type 2. Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection 3. Route based on collected findings to [api-sec](../hack-api-sec/SKILL.md), [auth-sec](../hack-auth-sec/SKILL.md), [injection-checking](../hack-injection-checking/SKILL.md), or [business-logic-vuln](../hack-business-logic-vuln/SKILL.md)
在 GitHub 查看