ap6pack/outrider-recon
11 skills
$npx skills add ap6pack/outrider-reconSkillInstalls
analysis-and-reportingEndpoint interest scoring (0–100), mobile app ownership confidence, attack-path hint patterns (35 templates), severity decision matrix (92 examples), sector…cloud-and-infraCloud-native service fingerprints, Kubernetes/container exposure, CI/CD platform exposure, TLS deep audit, and favicon hash pivot for authorized infrastructure…identity-fabricConcrete endpoints, probes, and enumeration techniques for identity provider fingerprinting and auth surface mapping.offensive-osintRouter for the Offensive OSINT arsenal. Dispatches to focused sub-skills by task type.osint-methodologyComprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments.people-breach-intelBreach data lookup, HudsonRock infostealer intel, email-pattern inference, email harvest, Slack/Discord discovery, package registry leaks, and vulnerability…post-discoveryPost-credential enumeration workflows for validated live keys — AWS IAM enum, GitHub PAT scope/repo enum, Slack workspace enum, JWT triage, Postman PMAK…recon-asset-discoverySubdomain enumeration, CT logs, DNS record catalog, WHOIS/RDAP, and passive reconnaissance for authorized external recon.report-templateAutonomous report generation from collected findings. Produces bug bounty submissions, client deliverables, and vulnerability reports using the standard…secrets-and-dorks48-pattern secret regex catalog, 70 dork corpus across 9 categories, GitHub code-search dorks, and 9 read-only credential validators for authorized secret…web-surfaceProbe paths, endpoint scoring, email security analysis, vendor fingerprints, documentation leak hunting, and API endpoint references for authorized web-surface…