Nmap Pro Pentest Scans

核心功能：为授权目标规划并编排合规Nmap扫描工作流，涵盖主机发现、端口/服务枚举、NSE分析，可选择三种扫描配置，生成标准化扫描计划与发现报告。适用于渗透测试的发现阶段（符合PTES、MITRE规范）。输入需指定扫描范围、目标等参数，输出含多格式扫描计划、推荐命令、发现结果文件，执行前需验证范围并获明确授权，支持dry-run模式。

0x-professor

热度 96.47

最近更新 2026-05-17 13:00:53

分类：安全依赖：代码执行 / 读写文件应用场景：报告撰写 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add nmap-pentest-scans

Metadata

name: nmap-pentest-scans
description: Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

Nmap Pentest Scans

Stage

PTES: 2-3
MITRE: TA0007 - Discovery

Objective

Design reproducible Nmap scan workflows for authorized targets and produce deterministic scan-plan artifacts.

Required Workflow

Validate scope before any active action and reject out-of-scope targets.
Require explicit authorization for non-dry-run execution.
Select profile (stealth, balanced, fast) and build command sequence.
Produce normalized findings and export deterministic artifacts.

Execution

python skills/nmap-pentest-scans/scripts/nmap_pentest_scans.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run

Outputs

scan-plan.json
scan-plan.md
recommended-commands.txt
findings/nmap-pentest-findings.json
nmap-pentest-scans-report.json

References

references/tools.md
references/scan-profiles.md
skills/autonomous-pentester/shared/scope_schema.json
skills/autonomous-pentester/shared/finding_schema.json

Legal and Ethical Notice

WARNING AUTHORIZED USE ONLY
This skill prepares and can orchestrate live network scan workflows.
Use only with written authorization and approved scope.