curiouslearnerdev/online_tools-ai/nmap-recon

Claude Code and agent skill by curiouslearnerdev/online_tools-ai

Trust tier 2
  • community
LLM review pending
Source check pending

Checking that the SKILL.md file is still in the repository.

Network reconnaissance workflow using nmap, masscan, and rustscan via HexStrike tools

Install

npx vskill@latest install curiouslearnerdev/online_tools-ai/nmap-recon

SKILL.md

nmap-recon

Step-by-step network reconnaissance skill for HexStrike AI. Use this skill when a user asks to scan a host, discover open ports, enumerate services, or perform OS detection.

Workflow

1. Fast port discovery (rustscan or masscan)

Start with a fast sweep to identify open ports before running detailed scans.

  • Prefer rustscan for speed on a single target.
  • Prefer masscan for large CIDR ranges.
run_tool(tool="rustscan", target="<target>", ports="1-65535")
2. Service & version detection (nmap)

Run nmap against the open ports discovered in step 1 to enumerate services, versions, and scripts.

run_tool(tool="nmap", target="<target>", ports="<open_ports>", flags="-sV -sC -O")

Useful nmap flag combinations:

GoalFlags
Service + version detection-sV
Default NSE scripts-sC
OS detection-O
Aggressive (all of the above + traceroute)-A
UDP scan-sU
Full port range-p-
3. Targeted NSE scripts (optional)

If specific services are found, run targeted NSE scripts for deeper enumeration.

ServiceSuggested scripts
SMB (445)--script smb-vuln-*,smb-enum-shares
HTTP (80/443)--script http-title,http-headers,http-methods
FTP (21)--script ftp-anon,ftp-bounce
SSH (22)--script ssh-hostkey,ssh-auth-methods
SNMP (161/udp)--script snmp-info,snmp-interfaces
run_tool(tool="nmap_advanced", target="<target>", ports="<port>", scripts="<script_list>")
4. ARP scan (local network only)

For targets on the same subnet, use arp_scan to identify live hosts before deeper scanning.

run_tool(tool="arp_scan", target="<subnet_cidr>")

Tips

  • Always confirm scope before scanning. Only scan targets you are authorized to test.
  • Start with -T3 (default timing) and increase to -T4 only on reliable networks.
  • Save output with -oN, -oX, or -oG flags for later analysis; pass via the output_file parameter where supported.
  • Chain results: feed open ports from rustscan/masscan directly into nmap to avoid redundant full-port scans.

HexStrike Tool Reference

ToolUse case
nmapService/version/script scanning
nmap_advancedNSE script targeting
masscanHigh-speed large-range port sweep
rustscanFast single-target port discovery
arp_scanLocal subnet host discovery

Security

  • Security scanPassed, 100 of 100Pattern checks on the skill's files.
  • Model reviewNot runA model review is scheduled for the next rescan.

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

7-day trend score
0

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/curiouslearnerdev/online_tools-ai/nmap-recon/badge)](https://verified-skill.com/skills/curiouslearnerdev/online_tools-ai/nmap-recon)

Something wrong with this skill or its page? Tell us.