← all domains
3 skills

Recon & OSINT

5-stage recon pipeline, asset-graph methodology, subdomain enumeration, identity-fabric mapping, and crypto tracing.

/osint-methodologyBoth ✓
OSINT Methodology
5-stage recon pipeline with 29 asset types, identity-fabric mapping (Entra/Okta/ADFS), crypto tracing, image geolocation, and attribution workflows.
/offensive-osintBoth ✓
Offensive OSINT
Offensive OSINT techniques for authorized red-team engagements — breach correlation, LinkedIn harvesting, infrastructure pivot trails.
/hunt-subdomainLimited ⚠
Subdomain Hunter
Subdomain enumeration and takeover identification — passive/active discovery, dangling DNS patterns, and scope expansion strategy.

Ready to install your first skill? Start in minutes.

Browse all 8 attack domains — 51 specialized skills, MIT licensed.

Browse all 8 domainsRead the install guide

Works with Claude Free, Pro, Teams, and Enterprise · MIT License