active-scan
Skill9 starsChanged 23 days agoMITView on GitHub
主动端口与服务扫描（nmap/masscan），严格遵守授权范围
In this repository22 other files it gives its agents.
- asset-correlationSkill
- browser-automationSkill
- chisel-tunnelSkill
- cn-proxy-poolSkill
- credential-attackSkill
- dir-bruteforceSkill
- fofa-reconSkill
- frp-tunnelSkill
- fscan-intranetSkill
- gogo-intranetSkill
- kimi-webbridgeSkill
- lateral-movementSkill
- nuclei-scanSkill
- passive-reconSkill
- recon-pipelineSkill
- redteam-setupSkill
- shell-handlerSkill
- suo5-tunnelSkill
- unauth-exploitSkill
- vps-reverse-shellSkill
- web-fingerprintSkill
- webshell-toolkitSkill
The file
Files
前置检查
- 确认目标 CIDR 在授权范围内。
- 确认当前时间窗口允许主动扫描。
命令
- 快速存活：
nmap -sn <cidr> - 全端口（限速）：
nmap -sS -p- --min-rate 1000 -T4 <target> -oX runs/nmap-full.xml - 服务版本：
nmap -sV -sC -p <ports> <target> -oX runs/nmap-svc.xml
本地已备好的工具（绝对路径，优先用它们，不要手搓）
| 用途 | 命令 |
| 端口扫描 | nmap / masscan / ~/.dsh/redteam/toolkit/naabu/naabu（SYN 需 root，否则加 -scan-type c） |
| 内网综合扫描 | ~/.dsh/redteam/toolkit/fscan/fscan（技能 fscan-intranet） |
| 内网测绘/指纹 | ~/.dsh/redteam/toolkit/gogo/gogo（技能 gogo-intranet） |
| HTTP 探测（ProjectDiscovery） | ~/.local/bin/pd-httpx（注意：/usr/bin/httpx 是 Python httpx 库的 CLI，不是这个） |
| 子域/解析 | ~/.dsh/redteam/toolkit/subfinder/subfinder、~/.dsh/redteam/toolkit/dnsx/dnsx |
| POC 扫描 | nuclei（模板已在 ~/.local/nuclei-templates） |
| 目录爆破 | ffuf、~/.dsh/redteam/toolkit/dirsearch/dirsearch |
| 隧道 | ~/.dsh/redteam/toolkit/suo5/suo5-linux-amd64、toolkit/chisel/chisel、toolkit/frp/{frpc,frps} |
| 完整清单 | ~/.dsh/redteam/toolkit/清单.md、技能工具清单.md |
setup.sh 不下载 dirsearch。清单.md 是说明文件，缺了不代表扫描器没装。Windows 与 ARM 构建也不在安装脚本里。
落库要求
provenance = active，tool = nmap/masscan，记录 scan_run。
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.