Навыки scanning-tools
📦
scanning-tools
v1.1 Ревизия содержимого r1 Критично ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе
Выполнение авторизованных сканирований безопасности
Командам безопасности нужны согласованные рабочие процессы для сканирования авторизованных систем без пропуска распространенных проверок. Этот навык систематизирует выбор инструментов, команды, этапы отчетности и рекомендации по проверке для Claude, Codex и Claude Code.
Поддерживает: Claude Codex Code(CC)
Не устанавливайте этот Skill автоматически.
Каноническая политика требует проверки оператором перед любым действием по установке.
Установить с помощью моего Агента
Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.
Запрос агента
Review the Skillstore skill "scanning-tools" from https://skillstore.io/skills/sickn33-scanning-tools.md and its manifest at https://skillstore.io/api/skills/sickn33-scanning-tools/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.
Ресурсы для AI-агентов
Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.
Протестировать
Использование «scanning-tools». Создай план сканирования для утвержденной внутренней подсети и веб-приложения.
Ожидаемый результат:
Поэтапный план с проверками авторизации, обнаружением хостов, границами веб-краулера, валидацией уязвимостей, обработкой доказательств и контрольными точками отчетности.
Использование «scanning-tools». Суммируй результаты сканера для руководства.
Ожидаемый результат:
Резюме для руководства с темами рисков, затронутыми системами, влиянием на бизнес, ответственными за устранение и последующими шагами проверки.
Использование «scanning-tools». Устрани проблему сканирования, которое пропустило ожидаемые хосты.
Ожидаемый результат:
Чеклист, охватывающий подтверждение области, поведение файрвола, методы обнаружения, настройки DNS, время выполнения сканера и проверку подключения.
Аудит безопасности
Критичноv5 • 09.07.2026 Открыть версионный отчет
The audit confirms substantial high-risk scanning and exploitation guidance throughout SKILL.md, including Nmap, Masscan, Aircrack-ng, Metasploit, sudo-driven tools, and active web scanners. Several Markdown backtick detections are documentation artifacts, but the skill still instructs users to run intrusive commands and includes critical Internet-scale scanning and exploit validation workflows. No prompt injection text was found.
1
Просканировано файлов
595
Проанализировано строк
86
Пункты проверки
0
Ложные срабатывания проигнорированы
Подтверждённые проблемы безопасности (59)
Критично
Metasploit framework
#### Metasploit Vulnerability Validation
The skill explicitly introduces Metasploit vulnerability validation and starts msfconsole. Metasploit is exploitation tooling and is a critical marketplace risk indicator.
Критично
Metasploit framework
# Start Metasploit
The skill explicitly introduces Metasploit vulnerability validation and starts msfconsole. Metasploit is exploitation tooling and is a critical marketplace risk indicator.
Критично
Global Internet Mass Scanning Guidance
The skill includes Masscan guidance for scanning 0.0.0.0/0 at a high rate. This enables indiscriminate Internet probing outside an authorized scope.
The exact command targets 0.0.0.0/0 and specifies a very high scan rate, which directly confirms global mass scanning intent.
Высокий
Certificate/key files
zap.sh -daemon -port 8080 -config api.key=<your_key>
The command places a ZAP API key value in command-line arguments. Even with a placeholder, this encourages handling sensitive API material in an exposed process command.
Высокий
System reconnaissance
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The Nmap timing option is described as paranoid and for IDS evasion. That context supports stealthy reconnaissance, not just benign inventory.
Высокий
System reconnaissance
sudo airodump-ng -c <channel> --bssid <target_bssid> -w capture wlan0mon
The Aircrack-ng capture command targets a specific wireless BSSID and writes captures. That is targeted wireless reconnaissance activity.
Высокий
Network scanning tools
#### Nmap (Network Mapper)
The line names a network scanning tool section that is followed by executable scanner guidance. It is enabling context for high-risk scanning workflows.
Высокий
Network scanning tools
nmap -sn 192.168.1.0/24 # Ping scan (no port scan)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Показать все подтверждённые находки (59)
Высокий
Network scanning tools
nmap -sL 192.168.1.0/24 # List scan (DNS resolution)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -Pn 192.168.1.100 # Skip host discovery
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -sS 192.168.1.100 # TCP SYN scan (stealth)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -sT 192.168.1.100 # TCP connect scan
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -sU 192.168.1.100 # UDP scan
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -sA 192.168.1.100 # ACK scan (firewall detection)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -p 80,443 192.168.1.100 # Specific ports
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -p- 192.168.1.100 # All 65535 ports
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -p 1-1000 192.168.1.100 # Port range
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap --top-ports 100 192.168.1.100 # Top 100 common ports
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -sV 192.168.1.100 # Service version detection
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -O 192.168.1.100 # OS detection
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -A 192.168.1.100 # Aggressive (OS, version, scripts)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -T4 192.168.1.100 # Aggressive (faster)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -T5 192.168.1.100 # Insane (fastest)
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap --script=vuln 192.168.1.100 # Vulnerability scripts
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap --script=http-enum 192.168.1.100 # Web enumeration
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap --script=smb-vuln* 192.168.1.100 # SMB vulnerabilities
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap --script=default 192.168.1.100 # Default script set
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -oN scan.txt 192.168.1.100 # Normal output
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -oX scan.xml 192.168.1.100 # XML output
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -oG scan.gnmap 192.168.1.100 # Grepable output
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
nmap -oA scan 192.168.1.100 # All formats
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
#### Masscan
The line names a network scanning tool section that is followed by executable scanner guidance. It is enabling context for high-risk scanning workflows.
Высокий
Network scanning tools
masscan -p80 192.168.1.0/24 --rate=1000
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
masscan -p80,443,8080 192.168.1.0/24 --rate=10000
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
masscan -p0-65535 192.168.1.0/24 --rate=5000
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
masscan 0.0.0.0/0 -p443 --rate=100000 --excludefile exclude.txt
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
masscan -p80 192.168.1.0/24 -oG results.gnmap
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
masscan -p80 192.168.1.0/24 -oJ results.json
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
masscan -p80 192.168.1.0/24 -oX results.xml
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
masscan -p80 192.168.1.0/24 --banners
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
# Import Nmap results
The line imports Nmap results into the Metasploit workflow. It connects network scan data to exploitation-oriented tooling.
Высокий
Network scanning tools
- Host discovery (Nmap ping sweep)
The line recommends host discovery or Masscan/Nmap for network discovery. This supports active reconnaissance of networks.
Высокий
Network scanning tools
| Network Discovery | Nmap, Masscan |
The line recommends host discovery or Masscan/Nmap for network discovery. This supports active reconnaissance of networks.
Высокий
Network scanning tools
### Nmap Cheat Sheet
The line names a network scanning tool section that is followed by executable scanner guidance. It is enabling context for high-risk scanning workflows.
Высокий
Network scanning tools
| Ping Scan | `nmap -sn <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
| Quick Scan | `nmap -T4 -F <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
| Full Scan | `nmap -p- <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
| Service Scan | `nmap -sV <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
| OS Detection | `nmap -O <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
| Aggressive | `nmap -A <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
| Vuln Scripts | `nmap --script=vuln <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
| Stealth Scan | `nmap -sS -T2 <target>` |
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
1. Try different discovery methods: `nmap -Pn` or `nmap -sn -PS/PA/PU`
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
3. Use TCP SYN scan: `nmap -PS22,80,443`
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
1. Increase timing: `nmap -T4` or `-T5`
The line provides or references executable Nmap or Masscan scanning guidance. These tools actively probe network targets and require strict authorization.
Высокий
Network scanning tools
3. Use Masscan for initial discovery
The line recommends host discovery or Masscan/Nmap for network discovery. This supports active reconnaissance of networks.
Высокий
Wireless Deauthentication And Credential Cracking Guidance
The skill provides Aircrack-ng commands for targeted capture, deauthentication, WPA handshake cracking, and WEP cracking. These actions can disrupt networks or recover credentials.
The line range explicitly labels a deauthentication attack and includes WPA and WEP cracking commands, leaving little ambiguity about offensive capability.
Средний
Destructive Malware Scan Removal Command
The skill recommends a ClamAV removal option that can delete files during a scan. Running this on production paths could cause data loss.
The command includes the removal option on a scan path, which directly supports deletion behavior even if intended for infected files.
Пункты проверки возможностей (86)
Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.
Критично
Ruby/shell backtick execution
```bash
The line range contains Metasploit startup, database import, scanner module use, target setting, and exploit suggestion commands. This is explicit exploitation workflow guidance.
Высокий
Ruby/shell backtick execution
```bash
The line range is a shell block with Nmap host discovery, port scanning, service detection, OS detection, and vulnerability scripts. These commands actively probe network targets and can be misused outside authorization.
Высокий
Ruby/shell backtick execution
```bash
The line range documents Masscan commands, including high-rate and Internet-wide scanning examples. This is real external scanner guidance with significant abuse potential.
Высокий
Ruby/shell backtick execution
```bash
The line range contains OWASP ZAP commands for quick scans, spidering, active scanning, and daemon API configuration. Active web scanning can affect external applications.
Высокий
Ruby/shell backtick execution
```bash
The line range contains Docker-based OWASP ZAP scan commands against a target URL. These commands run external web scanning tools.
Высокий
Ruby/shell backtick execution
```bash
The line range contains Aircrack-ng commands for monitor mode, wireless capture, deauthentication, and password cracking. These are offensive wireless testing commands.
Высокий
Ruby/shell backtick execution
```bash
The line range contains privileged Lynis audit commands and report generation. These commands read broad host security state with elevated permissions.
Высокий
Ruby/shell backtick execution
| Ping Scan | `nmap -sn <target>` |
The table entry provides an Nmap ping scan command template. It is an executable network discovery command.
Высокий
Ruby/shell backtick execution
| Quick Scan | `nmap -T4 -F <target>` |
The table entry provides an Nmap quick scan command template. It is an executable network scanning command.
Высокий
Ruby/shell backtick execution
| Full Scan | `nmap -p- <target>` |
The table entry provides an Nmap full-port scan command template. Full port scans can be intrusive without authorization.
Высокий
Ruby/shell backtick execution
| Service Scan | `nmap -sV <target>` |
The table entry provides an Nmap service detection command template. Service enumeration actively probes target systems.
Высокий
Ruby/shell backtick execution
| OS Detection | `nmap -O <target>` |
The table entry provides an Nmap OS detection command template. OS fingerprinting is active reconnaissance.
Высокий
Ruby/shell backtick execution
| Aggressive | `nmap -A <target>` |
The table entry provides an Nmap aggressive scan command template. Aggressive scanning combines multiple probes and scripts.
Высокий
Ruby/shell backtick execution
| Vuln Scripts | `nmap --script=vuln <target>` |
The table entry provides an Nmap vulnerability script command template. Vulnerability scripts can be intrusive on targets.
Высокий
Ruby/shell backtick execution
| Stealth Scan | `nmap -sS -T2 <target>` |
The table entry provides an Nmap stealth scan command template. Stealth scan guidance can support unauthorized reconnaissance.
Высокий
Ruby/shell backtick execution
1. Try different discovery methods: `nmap -Pn` or `nmap -sn -PS/PA/PU`
The troubleshooting guidance provides Nmap discovery commands for hosts that are not detected. These commands can expand active probing behavior.
Высокий
Ruby/shell backtick execution
3. Use TCP SYN scan: `nmap -PS22,80,443`
The troubleshooting guidance provides an Nmap TCP SYN discovery command. It is active network reconnaissance guidance.
Высокий
Ruby/shell backtick execution
1. Increase timing: `nmap -T4` or `-T5`
The troubleshooting guidance recommends faster Nmap timing settings. Higher timing can increase scan intensity and operational impact.
Высокий
sudo privilege escalation
sudo systemctl start nessusd
The command starts the Nessus daemon with sudo. It launches a privileged vulnerability scanning service on the host.
Высокий
sudo privilege escalation
sudo apt install openvas
The command uses sudo to install, configure, or start OpenVAS services. Privileged scanner setup changes the host and expands attack surface if misused.
Высокий
sudo privilege escalation
sudo gvm-setup
The command uses sudo to install, configure, or start OpenVAS services. Privileged scanner setup changes the host and expands attack surface if misused.
Высокий
sudo privilege escalation
sudo gvm-start
The command uses sudo to install, configure, or start OpenVAS services. Privileged scanner setup changes the host and expands attack surface if misused.
Высокий
sudo privilege escalation
sudo airmon-ng start wlan0
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
Высокий
sudo privilege escalation
sudo airodump-ng wlan0mon
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
Высокий
sudo privilege escalation
sudo airodump-ng -c <channel> --bssid <target_bssid> -w capture wlan0mon
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
Высокий
sudo privilege escalation
sudo aireplay-ng -0 10 -a <bssid> wlan0mon
The command uses sudo with Aircrack-ng tooling to change wireless mode, capture traffic, or perform deauthentication. Elevated wireless attack commands are high risk.
Высокий
sudo privilege escalation
sudo freshclam
The command updates antivirus definitions with sudo. It modifies system-maintained security data and requires elevated trust.
Высокий
sudo privilege escalation
sudo lynis audit system
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
Высокий
sudo privilege escalation
sudo lynis audit system --quick
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
Высокий
sudo privilege escalation
sudo lynis audit system --profile server
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
Высокий
sudo privilege escalation
sudo lynis audit system --report-file /tmp/lynis-report.dat
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
Высокий
sudo privilege escalation
sudo lynis show profiles
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
Высокий
sudo privilege escalation
sudo lynis audit system --tests-from-group malware
The command runs Lynis with sudo and can read broad system configuration or write reports. Privileged host audit commands require explicit authorization.
Высокий
Hardcoded IP address
masscan 0.0.0.0/0 -p443 --rate=100000 --excludefile exclude.txt
The command scans 0.0.0.0/0 with Masscan at a very high rate. That is Internet-wide probing guidance with clear misuse potential.
Высокий
Hardcoded IP address
set RHOSTS 192.168.1.0/24
The IP range is assigned to Metasploit RHOSTS for an SMB scanner module. This defines targets for exploitation-oriented scanning.
Средний
Ruby/shell backtick execution
```bash
The line range contains Nessus service and scan commands that create and launch vulnerability scans against a network range. This is external scanner execution guidance, not inert prose.
Средний
Ruby/shell backtick execution
```bash
The line range contains OpenVAS installation, service startup, and scan target creation commands. These commands run scanner tooling and define network targets.
Средний
Ruby/shell backtick execution
```bash
The line range contains Nikto web server scanner commands and tuning options. This is executable scanner guidance for probing web targets.
Средний
Ruby/shell backtick execution
```bash
The line range contains Kismet commands for wireless detection and hidden network observation. The commands gather wireless network information.
Средний
Ruby/shell backtick execution
```bash
The line range contains ClamAV commands that scan directories and can move or remove files. These external commands can alter local files if run.
Средний
Ruby/shell backtick execution
```bash
The line range contains Prowler installation and AWS assessment commands. These commands access cloud security data and require careful authorization.
Средний
Ruby/shell backtick execution
```bash
The line range contains ScoutSuite installation and cloud audit commands for AWS, Azure, and GCP. These commands access cloud account configuration data.
Средний
Ruby/shell backtick execution
```bash
The line range contains OpenSCAP evaluation and fix generation commands. These commands inspect compliance state and can generate remediation scripts.
Средний
Ruby/shell backtick execution
```bash
The line range contains report conversion and scanner report export commands. It is external command guidance tied to security scan results.
Средний
Ruby/shell backtick execution
2. Reduce port range: `--top-ports 100`
The troubleshooting guidance recommends changing the scanned port range. This is scanner operation guidance even though it is presented as an option.
Средний
Hardcoded URL
zap-cli quick-scan https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
Средний
Hardcoded URL
zap-cli spider https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
Средний
Hardcoded URL
zap-cli active-scan https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
Средний
Hardcoded URL
-t https://target.com -r report.html
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
Средний
Hardcoded URL
-t https://target.com -r report.html
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
Средний
Hardcoded URL
nikto -h https://target.com
The URL appears in active web scanner commands against a target site. Even as a placeholder, it documents network traffic to a web application target.
Средний
Hardcoded IP address
nmap -sn 192.168.1.0/24 # Ping scan (no port scan)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -sL 192.168.1.0/24 # List scan (DNS resolution)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -Pn 192.168.1.100 # Skip host discovery
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -sS 192.168.1.100 # TCP SYN scan (stealth)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -sT 192.168.1.100 # TCP connect scan
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -sU 192.168.1.100 # UDP scan
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -sA 192.168.1.100 # ACK scan (firewall detection)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -p 80,443 192.168.1.100 # Specific ports
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -p- 192.168.1.100 # All 65535 ports
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -p 1-1000 192.168.1.100 # Port range
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap --top-ports 100 192.168.1.100 # Top 100 common ports
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -sV 192.168.1.100 # Service version detection
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -O 192.168.1.100 # OS detection
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -A 192.168.1.100 # Aggressive (OS, version, scripts)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -T4 192.168.1.100 # Aggressive (faster)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -T5 192.168.1.100 # Insane (fastest)
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap --script=vuln 192.168.1.100 # Vulnerability scripts
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap --script=http-enum 192.168.1.100 # Web enumeration
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap --script=smb-vuln* 192.168.1.100 # SMB vulnerabilities
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap --script=default 192.168.1.100 # Default script set
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -oN scan.txt 192.168.1.100 # Normal output
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -oX scan.xml 192.168.1.100 # XML output
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -oG scan.gnmap 192.168.1.100 # Grepable output
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nmap -oA scan 192.168.1.100 # All formats
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
masscan -p80 192.168.1.0/24 --rate=1000
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
masscan -p80,443,8080 192.168.1.0/24 --rate=10000
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
masscan -p0-65535 192.168.1.0/24 --rate=5000
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oG results.gnmap
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oJ results.json
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oX results.xml
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
masscan -p80 192.168.1.0/24 --banners
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
nessuscli scan --create --name "Internal Scan" --targets 192.168.1.0/24
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Hardcoded IP address
<hosts>192.168.1.0/24</hosts>
The address is an RFC1918 example, but it is embedded in commands that perform active network scanning or vulnerability assessment. The operational behavior is real scanner traffic.
Средний
Temp directory access
sudo lynis audit system --report-file /tmp/lynis-report.dat
The command writes a privileged Lynis report to /tmp. Security reports can contain sensitive host details and temp paths may have weaker handling controls.
Факторы риска
⚙️ Внешние команды (50)
SKILL.md:44-83 SKILL.md:83-89 SKILL.md:89-107 SKILL.md:107-115 SKILL.md:115-127 SKILL.md:127-140 SKILL.md:140-161 SKILL.md:161-169 SKILL.md:169-183 SKILL.md:183-197 SKILL.md:197-213 SKILL.md:213-216 SKILL.md:216-224 SKILL.md:224-230 SKILL.md:230-251 SKILL.md:251-259 SKILL.md:259-280 SKILL.md:280-286 SKILL.md:286-299 SKILL.md:299-307 SKILL.md:307-328 SKILL.md:328-334 SKILL.md:334-353 SKILL.md:353-361 SKILL.md:361-382 SKILL.md:382-388 SKILL.md:388-403 SKILL.md:403-411 SKILL.md:411-427 SKILL.md:427-433 SKILL.md:433-447 SKILL.md:447-497 SKILL.md:497-514 SKILL.md:514-522 SKILL.md:522-523 SKILL.md:523-524 SKILL.md:524-525 SKILL.md:525-526 SKILL.md:526-527 SKILL.md:527-528 SKILL.md:528-529 SKILL.md:529-571 SKILL.md:571 SKILL.md:573-579 SKILL.md:579 SKILL.md:580-582 SKILL.md:117 SKILL.md:142 SKILL.md:143 SKILL.md:146
🌐 Доступ к сети (48)
SKILL.md:505 SKILL.md:120 SKILL.md:149 SKILL.md:202 SKILL.md:205 SKILL.md:206 SKILL.md:219 SKILL.md:223 SKILL.md:232 SKILL.md:294 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:54 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:91 SKILL.md:92 SKILL.md:95 SKILL.md:98 SKILL.md:101 SKILL.md:102 SKILL.md:103 SKILL.md:106 SKILL.md:123 SKILL.md:159 SKILL.md:171 SKILL.md:347 SKILL.md:538
📁 Доступ к файловой системе (3)
Обнаруженные паттерны
Metasploit framework×2System reconnaissance×2Network scanning tools×51
Аудитор:: codex Посмотреть историю аудитов →
Поделиться и цитировать этот отчет
Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.
Копировать ссылку на отчёт
https://skillstore.io/skills/sickn33-scanning-tools/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportЗначок Markdown
[](https://skillstore.io/skills/sickn33-scanning-tools?utm_source=security_passport_badge)Значок HTML
<a href="https://skillstore.io/skills/sickn33-scanning-tools?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-scanning-tools/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Встраиваемая карточка
<iframe src="https://skillstore.io/embed/skills/sickn33-scanning-tools.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Академические ссылки (APA · BibTeX · CFF)
Цитата APA
sickn33. (2026). scanning-tools security audit report (audit version 5) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-scanning-tools/audits/5Цитата BibTeX
@techreport{sickn33-sickn33-scanning-tools-2026,
author = {sickn33},
title = {scanning-tools security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-scanning-tools/audits/5},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "scanning-tools security audit report (audit version 5)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-scanning-tools/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-scanning-tools:audit:5"
description: "Skillstore immutable audit report identifier"
Оценка Skillstore
Почему такая оценка Достоверность доказательств: Средний 55
Архитектура
85
Сопровождаемость
87
Контент
69
Сообщество
78
Соответствие спецификации
Что вы можете построить
Планирование внутренних сканирований уязвимостей
Создайте план сканирования с заданной областью, который охватывает обнаружение, перечисление служб, проверки уязвимостей и отчетность для утвержденных активов.
Подготовка тестирования веб-приложений
Выберите инструменты веб-сканирования, определите границы обхода и активного тестирования и организуйте результаты для анализа устранения проблем.
Сбор доказательств соответствия требованиям
Используйте сканеры соответствия требованиям и этапы отчетности для сбора доказательств для CIS, PCI-DSS, HIPAA или внутренних проверок контроля.
Попробуйте эти промпты
Проверить готовность
Проверь мою авторизованную область сканирования, временное окно и список инструментов. Определи недостающие предварительные условия и начальные проверки с низким воздействием.
Создать план сканирования
Создай поэтапный план сканирования безопасности для этих утвержденных активов: [asset list]. Включи обнаружение, проверки уязвимостей, валидацию и отчетность.
Сравнить результаты сканеров
Сравни эти авторизованные результаты сканеров. Сгруппируй дубликаты, отметь вероятные ложные срабатывания и приоритизируй проблемы по влиянию на бизнес.
Спроектировать программу оценки
Спроектируй регулярную программу сканирования для моей организации. Включи контроль области, безопасные окна сканирования, обработку доказательств, отчетность и правила эскалации.
Лучшие практики
- Подтвердите письменную авторизацию и область перед любым сканированием.
- Начинайте с обнаружения с низким воздействием, затем повышайте интенсивность только при наличии одобрения.
- Фиксируйте версии инструментов, временные окна, цели и доказательства для каждой оценки.
Избегать
- Сканирование публичных или сторонних целей без письменного разрешения.
- Использование высокоскоростных или агрессивных сканирований в рабочее время без согласования.
- Публикация необработанного вывода сканирования, содержащего секреты, внутренние адреса или детали, пригодные для эксплуатации.
Часто задаваемые вопросы
Запускает ли этот навык сканирования автоматически?
Нет. Он предоставляет рекомендации по рабочим процессам и командам, которые пользователи могут применять в собственной авторизованной среде.
Кому следует использовать этот навык?
Он предназначен для специалистов по безопасности, работающих в рамках четко авторизованной области оценки.
Может ли он валидировать результаты сканирования?
Он может помочь организовать шаги валидации, но квалифицированный проверяющий должен подтвердить результаты и влияние на бизнес.
Включает ли он сканирование веб-приложений?
Да. Он охватывает Burp Suite, OWASP ZAP, Nikto, планирование обхода, активное тестирование и генерацию отчетов.
Каковы основные проблемы безопасности?
Рекомендации включают агрессивные сканеры, привилегированные команды, атаки на беспроводные сети и примеры валидации эксплойтов.
Может ли он поддерживать работу по соответствию требованиям?
Да. Он ссылается на инструменты и рабочие процессы для CIS, PCI-DSS, HIPAA, Lynis, OpenSCAP и отчетности по доказательствам.
Сведения для разработчиков
Автор
sickn33Лицензия
MIT
Версия автора
v1.1
Ревизия Skillstore
r1
Примечание о версии
Заявленная автором версия не соответствует SemVer.
Ссылка
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Актуальность поддержки
18.07.2026
Использование
7 загрузок · 121 просмотров
Структура файлов
📄 SKILL.md