스킬 recon-nmap
📦
recon-nmap
v0.1.0 콘텐츠 리비전 r2 치명적 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근🔑 환경 변수⚡ 스크립트 포함
승인된 Nmap 워크플로로 네트워크 매핑
네트워크 팀에는 범위, 일정, 보고를 명확하게 유지하는 반복 가능한 정찰 단계가 필요합니다. 이 스킬은 승인된 자산 발견, 서비스 열거, 취약점 검증을 위한 구조화된 Nmap 워크플로를 제공합니다.
지원: Claude Codex Code(CC)
이 Skill을 자동으로 설치하지 마세요.
공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "recon-nmap" from https://skillstore.io/skills/agentsecops-recon-nmap.md and its manifest at https://skillstore.io/api/skills/agentsecops-recon-nmap/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"recon-nmap" 사용 중입니다. 승인된 내부 서브넷에 대한 발견 및 포트 스캐닝을 계획하세요.
예상 결과:
승인 확인, 라이브 호스트 발견, 일반 포트 스캐닝, 서비스 탐지, 속도 제한, 명명된 결과 파일을 포함한 단계별 스캔 계획.
"recon-nmap" 사용 중입니다. Nmap 발견 사항을 보안 팀에 보고하는 방법을 요약하세요.
예상 결과:
범위, 스캔 타이밍, 발견된 호스트, 노출된 서비스, 의심되는 취약점, 오탐 확인, 조치 담당자를 다루는 간결한 보고서 개요.
"recon-nmap" 사용 중입니다. 취약한 프로덕션 환경에 맞게 Nmap 스캐닝을 조정하세요.
예상 결과:
승인된 시간대, 완화된 타이밍, 패킷 속도 제한, 더 작은 대상 배치, 모니터링 연락처, 롤백 지침을 사용하는 신중한 워크플로.
보안 감사
치명적v9 • 2026. 7. 23. 버전별 보고서 열기
Most static hits in templates and Markdown are false positives caused by code fences, placeholders, defensive examples, and documentation links. Confirmed findings include privileged Nmap execution, active-scanning commands, offensive NSE guidance, scan-evasion techniques, mutable CI dependencies, and a remote installer piped to Bash. The skill requires substantial restriction and remediation before public marketplace distribution.
6
스캔된 파일
2,165
분석된 줄 수
15
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (121)
치명적
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads a mutable remote installer and pipes it directly to Bash, enabling supply-chain code execution.
높음
Network scanning tools
name: recon-nmap
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
Network reconnaissance and security auditing using Nmap for port scanning, service enumeration,
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
tags: [reconnaissance, nmap, port-scanning, service-enumeration, network-security, osint]
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
packages: [nmap]
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
tools: [python3, masscan]
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
# Nmap Network Reconnaissance
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
Nmap (Network Mapper) is the industry-standard tool for network discovery, security auditing, and vu
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
확인된 121건 모두 보기
높음
Network scanning tools
nmap -F <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -A <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sn <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sn -PR <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sn -PS22,80,443 <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sn -PU53,161 <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -Pn <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sn <target-network>/24 -oG - | awk '/Up$/{print $2}' > live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -F -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p- -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 22,80,443,3389,8080 -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 1-1024,3000-9000 -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -sS <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sT <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -sU -p 53,161,500 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -A <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T0 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T1 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T2 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T3 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T4 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T5 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap --max-rate 100 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap --min-rate 10 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap --scan-delay 1s <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV --version-intensity 5 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV --version-intensity 0 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV -p 80,443 --script=http-headers,http-title <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 445 --script=smb-os-discovery,smb-security-mode <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 22 --script=ssh-hostkey,ssh-auth-methods <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 53 --script=dns-nsid,dns-recursion <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 80,443 --script=http-methods,http-robots.txt,http-title <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 3306 --script=mysql-info <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 5432 --script=pgsql-brute <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 1433 --script=ms-sql-info <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -O <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -A <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -O --osscan-limit <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -O --osscan-guess <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
Nmap Scripting Engine for advanced reconnaissance and vulnerability detection:
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
nmap -sC <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap --script=vuln <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --script=exploit <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --script=discovery <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap --script=http-sql-injection <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --script=smb-vuln-ms17-010,smb-vuln-cve-2017-7494 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --script=http-brute --script-args http-brute.path=/admin <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 445 --script=smb-vuln-ms17-010 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 443 --script=ssl-heartbleed <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --script=http-shellshock --script-args uri=/cgi-bin/test.sh <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 443 --script=ssl-enum-ciphers <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 80 --script=http-sql-injection <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 21 --script=ftp-anon <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap <target-ip> -oN scan_results.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap <target-ip> -oX scan_results.xml
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap <target-ip> -oG scan_results.gnmap
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap <target-ip> -oA scan_results
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap <target-ip> -oS scan_results.skid
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -f <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
sudo nmap -D RND:10 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
sudo nmap -D decoy1,decoy2,ME,decoy3 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
sudo nmap -S <spoofed-ip> -e <interface> <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --randomize-hosts -iL targets.txt
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --proxies http://proxy:8080 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
sudo nmap -sI <zombie-host> <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -sn -PE -PS80,443 -PA3389 <external-network>/24 -oG - | awk '/Up$/{print $2}' > external_hosts.
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -Pn -sV -p 21,22,25,53,80,110,143,443,587,993,995,3389,8080,8443 -iL external_hosts.txt -oA ext
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -Pn -sV --script=vuln -p 21,22,25,80,443,3389,8080,8443 -iL external_hosts.txt -oA external_vul
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -Pn -p 443,8443 --script=ssl-enum-ciphers,ssl-cert -iL external_hosts.txt -oA ssl_audit
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sn -PR <internal-network>/24 -oG - | awk '/Up$/{print $2}' > internal_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV -p- -T4 -iL internal_hosts.txt -oA internal_full_scan
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
sudo nmap -O -iL internal_hosts.txt -oA internal_os_detection
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV --script=default,discovery -iL internal_hosts.txt -oA internal_services
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 80,443,8000,8080,8443 --open -oG - <target-network>/24 | grep 'open' | awk '{print $2}' > we
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -sV -p 80,443,8080,8443 --script=http-enum,http-headers,http-methods,http-title,http-server-hea
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 80,443 --script=http-sql-injection,http-csrf,http-vuln-cve2017-5638 -iL web_servers.txt -oA
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 445 --open <target-network>/24 -oG - | grep 'open' | awk '{print $2}' > smb_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 445 --script=smb-protocols,smb-security-mode,smb-os-discovery -iL smb_hosts.txt -oA smb_enum
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 445 --script=smb-vuln* -iL smb_hosts.txt -oA smb_vulns
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 445 --script=smb-enum-shares,smb-enum-users -iL smb_hosts.txt -oA smb_shares
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -sV -p 1433,1521,3306,5432,5984,6379,9200,27017 <target-network>/24 -oA database_scan
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 3306 --script=mysql-info,mysql-databases,mysql-variables <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 5432 --script=pgsql-brute <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 27017 --script=mongodb-info,mongodb-databases <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -p 6379 --script=redis-info <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -Pn -sV --script=vuln -p 21,22,25,80,443,3389,8080 \
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -Pn <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -PS80,443 -PA3389 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -PE -PS22,80,443 -PA3389 -PU53,161 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T4 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -F <target-ip> # Top 100 ports
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap --top-ports 1000 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T4 192.168.1.1-50 &
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T4 192.168.1.51-100 &
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
nmap -T4 192.168.1.101-150 &
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
높음
Network scanning tools
# Use masscan for very fast port scanning
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
높음
Network scanning tools
masscan -p 1-65535 --rate 10000 <target-network>/24
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -T1 --scan-delay 1s <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
sudo nmap -f <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap --randomize-hosts -iL targets.txt
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -g 53 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 1-1000 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Network scanning tools
nmap -p 1001-2000 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
높음
Mutable CI actions can execute with repository credentials
GitHub Actions use mutable tags, including a secrets scanner that receives GITHUB_TOKEN, allowing upstream tag changes to alter privileged CI code.
The workflow visibly uses version tags and master instead of immutable commit SHAs, while one action receives GITHUB_TOKEN.
높음
Operational scan-evasion guidance
The guide provides fragmentation, decoy, source spoofing, proxy, idle-scan, and source-port techniques intended to bypass monitoring controls.
The sections explicitly describe firewall or IDS evasion and provide executable Nmap commands for each technique.
높음
Brute-force and exploit NSE execution
The guide provides executable NSE commands for exploit categories, SQL injection checks, SMB vulnerabilities, and HTTP or PostgreSQL brute-force testing.
The cited commands directly invoke exploit, vulnerability, injection, enumeration, and brute-force NSE scripts against supplied targets.
낮음
System reconnaissance
# Paranoid (0) - Extremely slow, IDS evasion
The text explicitly recommends timing behavior intended to evade detection during active reconnaissance.
낮음
System reconnaissance
# Scan with delays to avoid detection
The text explicitly recommends timing behavior intended to evade detection during active reconnaissance.
낮음
System reconnaissance
nmap <target-ip> -oS scan_results.skid
The example runs Nmap against a target and therefore performs active reconnaissance despite only demonstrating an output format.
기능 검토 항목 (15)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
높음
sudo privilege escalation
sudo nmap -sS <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -sU -p 53,161,500 <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -A <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -O <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -A <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -O --osscan-limit <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -O --osscan-guess <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -f <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -D RND:10 <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -D decoy1,decoy2,ME,decoy3 <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -S <spoofed-ip> -e <interface> <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -sI <zombie-host> <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -O -iL internal_hosts.txt -oA internal_os_detection
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
높음
sudo privilege escalation
sudo nmap -f <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
낮음
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
This URL supplies executable installer content directly to a shell, so remote changes would execute inside CI.
위험 요인
⚙️ 외부 명령어 (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 SKILL.md:36-45 SKILL.md:45-76 SKILL.md:76-91 SKILL.md:91-102 SKILL.md:102-104 SKILL.md:104-110 SKILL.md:110-125 SKILL.md:125-130 SKILL.md:130-132 SKILL.md:132-135 SKILL.md:135-137 SKILL.md:137-140 SKILL.md:140-142 SKILL.md:142-145 SKILL.md:145-147 SKILL.md:147-150 SKILL.md:150-152 SKILL.md:152-156 SKILL.md:156-174 SKILL.md:174-178 SKILL.md:178-187 SKILL.md:187-193 SKILL.md:193-205 SKILL.md:205-209 SKILL.md:209-226 SKILL.md:226-232 SKILL.md:232-244 SKILL.md:244-256 SKILL.md:256-273 SKILL.md:273-293 SKILL.md:293-311 SKILL.md:311-317 SKILL.md:317-332 SKILL.md:332-336 SKILL.md:336-345 SKILL.md:345-351 SKILL.md:351-370 SKILL.md:370-384 SKILL.md:384-413 SKILL.md:413-425 SKILL.md:425-429 SKILL.md:429-441
🌐 네트워크 접근 (27)
assets/ci-config-template.yml:240 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:366 SKILL.md:631 SKILL.md:632 SKILL.md:633 SKILL.md:634 SKILL.md:635 SKILL.md:572 SKILL.md:573 SKILL.md:574
🔑 환경 변수 (23)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ 스크립트 포함 (2)
감지된 패턴
Pipe to shell patternSystem reconnaissance×3Network scanning tools×114
감사자: codex 감사 이력 보기 →
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/agentsecops-recon-nmap/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/agentsecops-recon-nmap?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/agentsecops-recon-nmap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-recon-nmap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/agentsecops-recon-nmap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
AgentSecOps. (2026). recon-nmap security audit report (audit version 9) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-recon-nmap/audits/9BibTeX 인용
@techreport{agentsecops-agentsecops-recon-nmap-2026,
author = {AgentSecOps},
title = {recon-nmap security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/agentsecops-recon-nmap/audits/9},
note = {Author version 0.1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "recon-nmap security audit report (audit version 9)"
version: "0.1.0"
type: report
authors:
- name: "AgentSecOps"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/agentsecops-recon-nmap/audits/9"
identifiers:
- type: other
value: "skillstore:agentsecops-recon-nmap:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 55
아키텍처
100
유지보수성
87
콘텐츠
73
커뮤니티
87
사양 준수
만들 수 있는 것
내부 네트워크 세그먼트 검증
라이브 호스트, 열린 포트, 서비스 버전, 세그먼테이션 격차를 발견하는 범위 지정 Nmap 스캔을 계획합니다.
외부 경계 검토 준비
문서화된 속도 제한과 출력을 포함하여 승인된 외부 범위에 대한 단계별 정찰 워크플로를 구축합니다.
컴플라이언스 스캔 증거 확인
스캔 목표를 감사 증거를 위한 명령, 로깅 요구사항, 보고서 산출물로 변환합니다.
이 프롬프트를 사용해 보세요
기본 승인 스캔 계획
승인된 /24 네트워크에 대한 안전한 Nmap 계획을 작성하세요. 범위 확인, 호스트 발견, 포트 스캐닝, 출력 파일을 포함하세요.
라이브 호스트에 대한 서비스 열거
승인된 라이브 호스트 목록이 주어졌을 때, 버전 탐지, 유용한 스크립트, 보고서 출력을 포함한 Nmap 서비스 열거 워크플로를 설계하세요.
저영향 평가 조정
민감한 프로덕션 네트워크에 맞게 Nmap 평가를 조정하세요. 타이밍, 속도 제한, 유지보수 시간대, 검증 단계를 포함하세요.
전체 정찰 런북 구축
내부 및 외부 자산을 위한 완전한 승인된 Nmap 정찰 런북을 작성하세요. 증거 처리, 오탐 검토, 경영진 보고를 포함하세요.
모범 사례
- 스캔 활동 전에 서면 승인, 정확한 범위, 유지보수 시간대를 확인하세요.
- 침습적 스크립트나 전체 포트 스윕을 사용하기 전에 저영향 발견 및 속도 제한 스캔부터 시작하세요.
- 각 보고서와 함께 스캔 로그, 명령 기록, 소스 IP 세부정보, 타임스탬프, 검증 메모를 보관하세요.
피하기
- 승인된 범위를 벗어난 네트워크, 호스트 또는 포트를 스캔하는 것.
- 일상적인 발견 중에 익스플로잇, 브루트포스, 회피 또는 서비스 거부 스크립트를 실행하는 것.
- 수동 검증과 소유자 검토 없이 NSE 취약점 출력을 최종 증거로 간주하는 것.
자주 묻는 질문
이 스킬은 Nmap을 자동으로 실행하나요?
아니요. 사용자가 승인된 환경에서 적용할 수 있는 계획 지침과 명령 패턴을 제공합니다.
이 워크플로를 사용하기 전에 승인이 필요한가요?
예. 네트워크 스캐닝은 사용자가 명시적인 서면 허가를 받은 시스템으로 제한되어야 합니다.
예시가 서비스를 중단시킬 수 있나요?
예. 전체 포트 스캔, UDP 스캔, 취약점 스크립트, 공격적인 타이밍은 취약한 서비스에 영향을 줄 수 있습니다.
이 스킬에는 보고 지침이 포함되어 있나요?
예. Nmap 출력 형식, XML 변환, grepable output, 감사 로그, 보고서 산출물을 다룹니다.
Claude, Codex 또는 Claude Code가 이 스킬을 사용할 수 있나요?
예. 메타데이터는 Claude, Codex, Claude Code 지원을 선언합니다.
침습적 NSE 스크립트를 기본적으로 사용해야 하나요?
아니요. 먼저 안전한 스크립트를 사용하고, 침습적 점검은 명시적으로 승인된 테스트 시간대에만 사용하세요.
개발자 세부 정보
작성자
AgentSecOps라이선스
MIT
작성자 버전
v0.1.0
Skillstore 리비전
r2
참조
9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2
유지보수 최신성
2026. 7. 26.
사용량
8 다운로드 · 411 조회
파일 구조