mcpField
P
pentest-osint-recon

pentest-osint-recon

github.com/jd-opensourceSecurity315159 installsUpdated 28w ago
Repository

About pentest-osint-recon

Pentest OSINT Recon is a security skill for collecting public information about an organization and mapping its external attack surface. Its workflow covers asset discovery, technology profiling, information gathering, correlation, and vulnerability intelligence.

Key features

  1. 01Subdomain and asset discovery
  2. 02Technology profiling
  3. 03Email and leak searches
  4. 04IP, domain, and technology correlation
  5. 05Software version checks against CVEs

Use cases

  1. 01Map an organization's external assets
  2. 02Profile technologies across discovered hosts
  3. 03Find public email and leak references
  4. 04Check discovered versions for known vulnerabilities

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/jd-opensource/joysafeter --skill pentest-osint-recon

After installing, type/pentest-osint-reconin Claude Code to confirm it loaded.

Bundled filesreferences/tools.mdreferences/workflows.md

Details

From the project README

Pentest OSINT Recon

Purpose

Gather publicly available information about a target organization to map its external attack surface, including subdomains, emails, and exposed assets.

Core Workflow

  1. Domain Enumeration: Discover subdomains and related assets using amass and subfinder.
  2. Tech Profiling: Identify technologies used on discovered assets using httpx and whatweb.
  3. Information Gathering: Search for emails, leaks, and social media presence using theharvester and search engines.
  4. Asset Correlation: Correlate IP addresses, domains, and technologies to find weak spots.
  5. Vulnerability Intel: Check discovered software versions against CVE databases.

References

  • references/tools.md
  • references/workflows.md

Comments

Markdown supported