outrider-recon
Gives authorized security teams skills and MCP servers for external attack-surface reconnaissance, covering asset discovery, identity provider mapping, cloud and container exposure, and severity-rated reporting.

Gives authorized security teams skills and MCP servers for external attack-surface reconnaissance, covering asset discovery, identity provider mapping, cloud and container exposure, and severity-rated reporting.
Endpoint interest scoring, mobile app ownership confidence, attack-path hint patterns, a severity decision matrix, sector…
Cloud-native service fingerprints, Kubernetes/container exposure, CI/CD platform exposure, TLS deep audit, and favicon hash pivot…
Concrete endpoints, probes, and enumeration techniques for identity provider fingerprinting and auth surface mapping. Covers…
Router for the Offensive OSINT arsenal. Dispatches to focused sub-skills by task type. Covers the full external red-team surface:…
Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the staged…
Breach data lookup, HudsonRock infostealer intel, email-pattern inference, email harvest, Slack/Discord discovery, package…
Post-credential enumeration workflows for validated live keys — AWS IAM enum, GitHub PAT scope/repo enum, Slack workspace enum,…
Subdomain enumeration, CT logs, DNS record catalog, WHOIS/RDAP, and passive reconnaissance for authorized external recon.
Autonomous report generation from collected findings. Produces bug bounty submissions, client deliverables, and vulnerability…
Secret regex catalog, dork corpus, GitHub code-search dorks, and read-only credential validators for authorized secret discovery…
Probe paths, endpoint scoring, email security analysis, vendor fingerprints, documentation leak hunting, and API endpoint…
Ships with outrider-recon: Claude-native, governed offensive-OSINT and external attack-surface platform for authorized security…
Is this you? Claim your profilePut a plugin at the top of Plugins, from $9