Plugin Claude Code
Offensive reconnaissance plugin — 8 skills + 2 agents for multi-phase security reconnaissance and vulnerability assessment. Includes nmap, nikto, sqlmap, shodan, nuclei, subfinder, whatweb, and orchestrated recon pipeline. Bilingual Thai+English output.
Instructions file
Instructions for mahuttha/offensive-recon, covering claude.md, what this is, architecture, plugin system and three phases (recon pipeline).
Agent
You are a security finding analyst that processes, deduplicates, and classifies vulnerability findings from multiple reconnaissance tools. You produce structured, bilingual (Thai+English) reports mapped to security frameworks.
Agent
You are a reconnaissance orchestrator that coordinates multi-phase security scanning workflows. You manage tool execution order, pass results between phases, and handle failures gracefully.
Hook
Runs when a session starts, executing session-start.sh via bash. From mahuttha/offensive-recon.
Skill Claude CodeCodex
Web server vulnerability scanning using Nikto. Detects outdated software, dangerous files, misconfigurations, and known vulnerabilities. Use when asked to scan a web server for vulnerabilities or misconfigurations.
Skill Claude CodeCodex
Port scanning, service detection, and OS fingerprinting using Nmap. Modes: quick (-F), standard (-sV), full (-sV -sC -O), stealth (-sS). Use when asked to scan ports, discover services, or fingerprint a target host.
Skill Claude CodeCodex
Template-based vulnerability scanning using Nuclei. Leverages existing NCSA templates and community templates. Modes: ncsa (custom university templates), full (all templates), severity filter. Use when asked to scan for vulnerabilities using templates.
Skill Claude CodeCodex
Full multi-phase reconnaissance pipeline orchestrating all tools. Phase 1: Passive recon (shodan, subfinder, whatweb). Phase 2: Discovery (nmap). Phase 3: Assessment (nuclei, nikto, sqlmap conditional). Use when asked for a complete security assessment or full recon.
Skill Claude CodeCodex
Passive reconnaissance using Shodan API. Modes: host lookup, search, domain info, DNS, honeypot check. No packets sent to target — API-based only. Use when asked to look up host info, check exposed services, or do passive recon.
Skill Claude CodeCodex
SQL injection detection and exploitation using SQLMap. Modes: detect (--batch), enumerate (--dbs), dump. Use when asked to test for SQL injection vulnerabilities. REQUIRES explicit authorization.
Skill Claude CodeCodex
Passive subdomain enumeration using Subfinder. Discovers subdomains from multiple passive sources without sending traffic to the target. Use when asked to enumerate subdomains or find related hosts.
Skill Claude CodeCodex
Technology fingerprinting and web application identification using WhatWeb. Detects CMS, frameworks, server software, JavaScript libraries. Aggression levels 1-4. Use when asked to identify technologies on a website.