recon-port-scan
recon-port-scan enables port discovery and service identification across target hosts using industry-standard tools. Execute fast common-port scans, comprehensive port-range sweeps, service version detection, stealth scanning, UDP discovery, OS fingerprinting, and high-speed mass scanning workflows.
recon-port-scan discovers open ports and identifies running services using nmap, masscan, and rustscan.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-06-04
recon-port-scan discovers open ports and identifies running services using nmap, masscan, and rustscan. recon-port-scan enables port discovery and service identification across target hosts using industry-standard tools. Execute fast common-port scans, comprehensive port-range sweeps, service version detection, stealth scanning, UDP discovery, OS fingerprinting, and high-speed mass scanning workflows.
Use it when
- recon-port-scan supports multiple scanning approaches to discover open ports.
- Yes, recon-port-scan includes service version detection capabilities.
Verify before relying
Read SKILL.md below before installing (12 files). Open directory: indexed for reading, not audited.
Similar skills
Install
crazyMarky/pentest-skills/recon-port-scan · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What can recon-port-scan do for network reconnaissance?
recon-port-scan enables port discovery and service identification across target hosts using industry-standard tools. You can execute fast common-port scans, comprehensive port-range sweeps, service version detection, stealth scanning, UDP discovery, OS fingerprinting, and high-speed mass scanning workflows to map your infrastructure.
How do I find open ports on a server with recon-port-scan?
recon-port-scan supports multiple scanning approaches to discover open ports. You can run quick scans of common ports, perform full port-range sweeps across all 65535 ports, execute UDP port discovery, or use high-speed mass scanning for large IP ranges. Choose the method that fits your target scope and time constraints.
Does recon-port-scan support service version detection?
Yes, recon-port-scan includes service version detection capabilities. Beyond identifying which ports are open, it can fingerprint running services and detect operating system signatures on target systems, giving you detailed visibility into what's actually running on discovered ports.
Can recon-port-scan perform stealth port scanning?
recon-port-scan supports stealth scanning techniques to minimize detection risk during authorized network reconnaissance. This allows you to conduct infrastructure mapping while reducing your scanning footprint on target systems.
What tools does recon-port-scan use for fast scanning?
recon-port-scan leverages industry-standard tools including nmap for comprehensive scanning and service detection, masscan for high-speed large-network sweeps, and rustscan for fast port discovery. These tools enable efficient scanning across large IP ranges while maintaining accuracy in service identification.
Is recon-port-scan suitable for authorized network reconnaissance?
Yes, recon-port-scan is designed for authorized network reconnaissance and infrastructure mapping. It enables security teams to perform legitimate port discovery, service enumeration, and OS fingerprinting as part of authorized security assessments and network administration tasks.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Port Scanning / Reconnaissance
Authorization Warning
IMPORTANT: Port scanning without proper authorization is illegal. Always ensure you have: - Written permission from the target system owner - Defined scope of authorized testing - Legal compliance with local regulations
Prerequisites
Required tools that must be installed on your system:
- nmap - sudo apt install nmap (Debian/Ubuntu) or brew install nmap (macOS)
Optional tools: - masscan - High-speed port scanner - rustscan - Modern fast scanner with nmap integration
Quick Start
Most commonly used commands for port scanning:
Fast Common Port Scan
nmap -T4 -F <target>
Quick scan of top 100 common ports.
Full Port Scan with Service Detection
nmap -sV -sC -p- <target>
Scan all 65535 ports with version detection and default scripts.
Stealth SYN Scan
```bash sudo nmap -sS -T2 -p-
(truncated - see the full file via the links below)
File tree — 12 files
recon-port-scan/SKILL.md
recon-port-scan/assets/common-services.txt
recon-port-scan/assets/top-100-ports.txt
recon-port-scan/assets/top-1000-ports.txt
recon-port-scan/references/masscan_guide.md
recon-port-scan/references/nmap_cheatsheet.md
recon-port-scan/references/rustscan_guide.md
recon-port-scan/references/scanning_techniques.md
recon-port-scan/scripts/masscan_to_nmap.py
recon-port-scan/scripts/merge_scan_results.py
recon-port-scan/scripts/parse_nmap_xml.py
recon-port-scan/scripts/port_scan_storage.py
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Discover open ports and identify running services on target systems”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Pentest Skills Framework is a modular penetration testing system designed for AI coding agents that translates natural language requests into security testing workflows. It provides atomic-level capabilities for port scanning, subdomain enumeration, SQL injection testing, XSS detection, and directory scanning, bundling automation scripts and reference documentation for each testing domain.
Network Netcat is a multi-purpose socket utility for connectivity testing, port scanning, banner extraction, and authorized file transfers across TCP and UDP connections. Use it to verify network reachability, enumerate services, and troubleshoot communication between systems in controlled environments.
recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection—all with built-in authorization safeguards to ensure proper testing scope.
This skill guides you through pivoting and tunneling strategies to reach internal networks from a compromised host during authorized penetration tests. It covers SSH port forwarding, SOCKS proxies, and specialized tools like Chisel, Ligolo-ng, and sshuttle, with a decision tree to select the right approach based on available access and network constraints.
This skill guides penetration testers through identifying and exploiting Windows kernel vulnerabilities for privilege escalation. It covers automated vulnerability assessment using tools like WES-NG and Watson, then walks through exploitation of named CVEs including PrintNightmare, EternalBlue, and others, with emphasis on reliability and crash risk mitigation.
Mcp Security Hub packages 38 MCP servers as Docker containers, exposing 300+ offensive security tools to Claude and compatible AI assistants. Run network scans, vulnerability assessments, binary analysis, and penetration testing workflows through natural language prompts.