Network Recon & Exploitation Assistant

Paste nmap output or manually add services to instantly get targeted attack playbooks. Covers SSH, HTTP, SMB, MySQL, Redis, MongoDB, Docker, Elasticsearch, Jenkins, and 20+ other services with enumeration commands, exploitation techniques, and known CVE checks. For authorized penetration testing only.

X LinkedIn Reddit

Input

Universal Recon Commands

Full port scan with version detection

nmap -sV -sC -p- TARGET --min-rate 5000 -oN scan.txt

Vulnerability scripts

nmap --script vuln TARGET -p- --min-rate 3000

OS detection

nmap -O -sV TARGET

UDP top ports

nmap -sU --top-ports 20 TARGET

Fast discovery with Masscan

masscan -p0-65535 TARGET --rate=10000 -oL masscan.txt

All nmap output formats

nmap -sV -sC -p- TARGET -oA scan_output  # .nmap .xml .gnmap

For authorized penetration testing only. Always obtain written permission before scanning.

$loading...