Habilidades nmap
📦
nmap
Revisión del contenido r2 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos
Ejecutar reconocimiento autorizado con Nmap
Los escaneos de red manuales pueden pasar por alto puertos y generar evidencia desordenada. Esta skill guía escaneos autorizados con Nmap, la organización de resultados y resúmenes de servicios.
Compatible con: Claude Codex Code(CC)
Detente y solicita confirmación antes de instalar.
Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "nmap" from https://skillstore.io/skills/brownfinesecurity-nmap.md and its manifest at https://skillstore.io/api/skills/brownfinesecurity-nmap/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "nmap". Planifica un escaneo para un servidor web interno aprobado.
Resultado esperado:
Un plan de escaneo paso a paso con confirmación de alcance, directorio de salida, descubrimiento de puertos, detección de servicios y una lista de verificación final de resumen.
Usando "nmap". Resume estos resultados Nmap para un dispositivo de cámara gestionado.
Resultado esperado:
Un informe conciso que enumera puertos abiertos, servicios detectados, posibles roles del dispositivo, scripts destacados y elementos de validación de seguimiento.
Usando "nmap". Ayúdame a elegir un tipo de escaneo para una subred de producción sensible.
Resultado esperado:
Una recomendación cautelosa que prioriza un alcance limitado, temporización más lenta, aprobación documentada y condiciones de detención claras.
Auditoría de seguridad
Riesgo altov10 • 23/7/2026 Abrir el informe versionado
The skill contains actionable Nmap commands for privileged, broad, stealth, vulnerability, protocol, and brute-force scans. Markdown, hard-link, and private-address alerts are false positives, but confirmed scan guidance creates substantial dual-use risk. Authorization is advisory, while evasion techniques and automatic privileged scanning remain operational instructions.
1
Archivos escaneados
533
Líneas analizadas
13
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (50)
Alto
System reconnaissance
Use when trying to avoid detection (requires root/sudo):
The text explicitly recommends a root SYN scan when trying to avoid detection. This is actionable covert-reconnaissance guidance rather than neutral system inventory.
Alto
Network scanning tools
description: Professional network reconnaissance and port scanning using nmap. Supports various scan
The metadata explicitly advertises port scanning, service enumeration, vulnerability scanning, and reconnaissance. This accurately identifies the skill's active dual-use capability.
Alto
Network scanning tools
You are helping the user perform professional network reconnaissance and port scanning using nmap. T
The instruction explicitly directs the agent to help perform Nmap reconnaissance and port scanning. This confirms active network-scanning intent.
Alto
Network scanning tools
sudo nmap -p- <target> -oA <output-dir>/nmap-portscan
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- -Pn <target> -oA <output-dir>/nmap-portscan
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p <OPEN_PORT_LIST> -sV -sC <target> -oA <output-dir>/nmap-services
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- <target> -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- -Pn <target> -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Mostrar los 50 problemas confirmados
Alto
Network scanning tools
nmap -p "$OPEN_PORTS" -sV -sC <target> -oA "$OUTPUT_DIR/nmap-services"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC -p- <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -sS -sV -sC <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -sU --top-ports 100 <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -A -T4 <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV --script vuln <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -O <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 80,443,8080,8443 --script http-* <target> -oA <output-dir>/nmap-web
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 22 --script ssh-* <target> -oA <output-dir>/nmap-ssh
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 554 --script rtsp-* <target> -oA <output-dir>/nmap-rtsp
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 80,554,8000,8080 --script http-methods,http-headers <target> -oA <output-dir>/nmap-onvif
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap <ip-address>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.0/24
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.1-254
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.1 192.168.1.10 192.168.1.100
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.0/24 --exclude 192.168.1.1,192.168.1.254
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script auth <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script brute <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sC <target> # equivalent to --script default
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script discovery <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script vuln <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script "http-*" <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 554 --script rtsp-methods,rtsp-url-brute <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 1900 --script upnp-info <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 1883,8883 --script mqtt-subscribe <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 502 --script modbus-discover <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p <ports> -sV -sC <target> -oA output/nmap-services
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC -T4 <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC -T2 <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap <options> <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- -Pn $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p "$OPEN_PORTS" -sV -sC $TARGET -oA "$OUTPUT_DIR/nmap-services"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 80 --script http-methods $TARGET -oA "$OUTPUT_DIR/nmap-http"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 554 --script rtsp-methods $TARGET -oA "$OUTPUT_DIR/nmap-rtsp"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -sU --top-ports 100 <target> -oA "$OUTPUT_DIR/nmap-udp"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -O <target> -oA "$OUTPUT_DIR/nmap-os"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV --script vuln <target> -oA "$OUTPUT_DIR/nmap-vuln"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network Scan Evasion Guidance
The skill recommends stealth scans, IDS-evasion timing, packet fragmentation, and trusted source ports. These techniques can facilitate covert reconnaissance.
The cited sections explicitly describe avoiding detection, IDS evasion, fragmented packets, and trusted source ports. The intent is direct and repeated.
Alto
Brute-Force and Endpoint Discovery Guidance
The skill recommends Nmap brute-force scripts and RTSP URL brute forcing. These actions can test credentials or enumerate protected endpoints.
The commands explicitly select the brute NSE category and rtsp-url-brute script. Their names and surrounding labels establish the intended behavior.
Alto
Privileged Broad Scanning Before Authorization
The default workflow mandates a privileged all-port scan and automatic firewall-bypass retry. Authorization appears only as a later question, not an execution gate.
The skill says to always use the privileged two-phase workflow, while authorization is only listed among questions near the end. No mandatory verification gate is defined.
Elementos de revisión de capacidades (13)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
sudo privilege escalation
sudo nmap -p- <target> -oA <output-dir>/nmap-portscan
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- -Pn <target> -oA <output-dir>/nmap-portscan
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- <target> -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- -Pn <target> -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -sS -sV -sC <target> -oA <output-prefix>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -sU --top-ports 100 <target> -oA <output-prefix>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -O <target> -oA <output-prefix>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
# Run with sudo
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap <options> <target>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- -Pn $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -sU --top-ports 100 <target> -oA "$OUTPUT_DIR/nmap-udp"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -O <target> -oA "$OUTPUT_DIR/nmap-os"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Factores de riesgo
⚙️ Comandos externos (50)
SKILL.md:13-21 SKILL.md:21-23 SKILL.md:23-30 SKILL.md:30-32 SKILL.md:32-40 SKILL.md:40-42 SKILL.md:42-43 SKILL.md:43-48 SKILL.md:48-50 SKILL.md:50-51 SKILL.md:51 SKILL.md:52-53 SKILL.md:53-66 SKILL.md:66-69 SKILL.md:69-71 SKILL.md:71-72 SKILL.md:72-74 SKILL.md:74-81 SKILL.md:81-84 SKILL.md:84-87 SKILL.md:87-89 SKILL.md:89-92 SKILL.md:92-97 SKILL.md:97-100 SKILL.md:100-102 SKILL.md:102-105 SKILL.md:105-111 SKILL.md:111-114 SKILL.md:114-116 SKILL.md:116-122 SKILL.md:122-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-134 SKILL.md:134-136 SKILL.md:136-137 SKILL.md:137-143 SKILL.md:143-145 SKILL.md:145-146 SKILL.md:146-152 SKILL.md:152-154 SKILL.md:154-155 SKILL.md:155-156 SKILL.md:156-162 SKILL.md:162-164 SKILL.md:164-165 SKILL.md:165-166 SKILL.md:166-172 SKILL.md:172-174
🌐 Acceso a red (6)
📁 Acceso al sistema de archivos (3)
Patrones detectados
System reconnaissanceNetwork scanning tools×46
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/brownfinesecurity-nmap/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/brownfinesecurity-nmap?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/brownfinesecurity-nmap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brownfinesecurity-nmap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/brownfinesecurity-nmap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
BrownFineSecurity. (2026). nmap security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brownfinesecurity-nmap/audits/10Cita BibTeX
@techreport{brownfinesecurity-brownfinesecurity-nmap-2026,
author = {BrownFineSecurity},
title = {nmap security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/brownfinesecurity-nmap/audits/10},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nmap security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
- name: "BrownFineSecurity"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/brownfinesecurity-nmap/audits/10"
identifiers:
- type: other
value: "skillstore:brownfinesecurity-nmap:audit:10"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
85
Mantenibilidad
87
Contenido
71
Comunidad
87
Cumplimiento de la especificación
Lo que puedes crear
Mapear un activo autorizado
Planificar y documentar un escaneo Nmap con alcance definido para un único host o subred aprobados.
Inventariar servicios internos
Identificar puertos abiertos y versiones de servicios en sistemas internos gestionados.
Revisar exposición de IoT
Comprobar dispositivos IoT aprobados en busca de servicios web, RTSP, MQTT y de administración expuestos.
Prueba estos prompts
Iniciar un plan de escaneo seguro
Ayúdame a planificar un escaneo Nmap autorizado para un host. Primero pregúntame por el objetivo, el alcance, los límites de tiempo y la ubicación de salida.
Ejecutar enumeración de servicios
Tengo autorización para este objetivo. Guíame en la detección de servicios en estos puertos abiertos y explica cada opción antes de la ejecución.
Analizar resultados guardados
Revisa mis resultados Nmap guardados, resume los puertos abiertos y las versiones, e identifica hallazgos que necesitan validación manual.
Crear un flujo de trabajo de prueba con alcance definido
Crea un flujo de trabajo Nmap con alcance definido para una evaluación IoT autorizada, incluyendo temporización segura, nomenclatura de salida y comprobaciones de seguimiento por tipo de servicio.
Mejores prácticas
- Confirmar la autorización por escrito y el alcance del objetivo antes de cualquier escaneo.
- Guardar los resultados de forma coherente para que los hallazgos puedan revisarse y reproducirse.
- Usar temporización conservadora en redes de producción o frágiles.
Evitar
- Escanear sistemas públicos o de terceros sin permiso explícito.
- Ejecutar escaneos amplios con sudo antes de confirmar el alcance y los límites de impacto.
- Tratar los resultados de vulnerabilidades NSE como prueba sin validación manual.
Preguntas frecuentes
¿Esta skill ejecuta escaneos por sí misma?
Proporciona orientación y comandos. La ejecución depende del entorno del agente y de la aprobación del usuario.
¿Se requiere autorización?
Sí. Debes confirmar la autorización y el alcance del objetivo antes de ejecutar cualquier escaneo.
¿Qué herramientas se requieren?
Nmap debe estar instalado. Algunos tipos de escaneo también requieren privilegios elevados.
¿Puede escanear servicios UDP?
Sí. Incluye orientación para escaneos UDP, pero los escaneos UDP son más lentos y necesitan una definición de alcance cuidadosa.
¿Puede interpretar resultados de escaneo?
Sí. Puede ayudar a resumir puertos abiertos, versiones de servicios, scripts y preguntas de seguimiento.
¿Es seguro para redes de producción?
Solo con alcance aprobado, temporización conservadora, conciencia de monitoreo y condiciones de detención claras.
Detalles del desarrollador
Autor
BrownFineSecurityLicencia
MIT
Revisión de Skillstore
r2
Aviso de versión
El autor no declaró una versión.
Ref.
a39a91716eadede5f4cdefd78178fed4e837a128
Actualidad del mantenimiento
24/7/2026
Uso
7 descargas · 243 vistas
Estructura de archivos
📄 SKILL.md