recon-quick for Openclaw

A high-performance reconnaissance utility for automated OSINT, subdomain enumeration, and vulnerability probing using bbot and nmap.

hostilespider
v1.0.0
Mar 30, 2026
0
1.4k
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install recon-quick

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install recon-quick using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is recon-quick?

recon-quick is a specialized technical module designed for security researchers and developers within the Openclaw Skills ecosystem. It streamlines complex reconnaissance tasks by providing one-command access to industry-standard tools like bbot and nmap, enabling fast and reliable data gathering for security audits.

By leveraging pre-configured workflows, this skill eliminates the manual overhead of setting up multi-stage scanning pipelines. Whether you are performing passive DNS analysis or active service fingerprinting, recon-quick ensures your data is collected efficiently and stored in a structured format suitable for further analysis or reporting.

recon-quick Use Cases

  • Rapidly mapping an organization's external attack surface during bug bounty engagements.
  • Automating routine port scans and service detection for security compliance checks.
  • Performing passive reconnaissance to gather intelligence without directly interacting with target infrastructure.
  • Integrating automated OSINT results into larger development and security reporting pipelines using Openclaw Skills.

How recon-quick Works

  1. The user selects a reconnaissance preset (e.g., subdomains, ports, or full) via the CLI.
  2. The skill invokes bbot to perform OSINT and subdomain discovery based on the specified scope.
  3. nmap is triggered for active port scanning and service version detection on discovered assets.
  4. Web probing and technology fingerprinting are performed to identify the target's tech stack.
  5. All findings are aggregated and exported into structured text and JSON reports in the designated output directory.

recon-quick Setup

Ensure you have the necessary binaries installed before using this skill within Openclaw Skills:

# Install bbot via pipx
pipx install bbot

# Install nmap (macOS)
brew install nmap

# Install nmap (Linux)
sudo apt install nmap

recon-quick Data Schema & Taxonomy

The skill organizes findings into a clean, hierarchical directory structure for easy consumption by other Openclaw Skills:

File Description
subdomains.txt List of all discovered subdomains
live-hosts.txt List of alive HTTP/HTTPS services
ports.txt Open ports and service detection results
tech-fingerprints.txt Identified web technologies and frameworks
nuclei-findings.txt Preliminary vulnerability scan results
full-report.json Comprehensive data export for automated processing

recon-quick Advanced Features

  • Support for custom wordlists to enhance subdomain brute-forcing accuracy.
  • Multi-threading capabilities via the --threads flag to significantly reduce scan duration.
  • Built-in proxy support (including SOCKS5/Tor) for anonymous reconnaissance operations.
  • JSON output mode for seamless integration with downstream data analytics and automation tools.
  • Automatic rate limiting and scope validation handled by the underlying bbot engine.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Requires
Bins bbotnmap
Github Stars: 0
forks: 0

Featured*