NixDaemon

NixOS pentest workstation as one flake — IceBreaker's successor
git clone https://git.daemon-sec.xyz/NixDaemon.git
Log | Files | Refs | README

commit 8b358a89ed362bfdf5635f899b5e775200fc45e0
parent 4e5eb0154d6efff753a26f603f4bef60846a0495
Author: DAEMON <zer0sec.xp@icloud.com>
Date:   Thu,  8 Oct 2026 18:50:00 +0100

feat(pentest): recon and scanning module

Diffstat:
Mmodules/features/pentest/default.nix | 1+
Amodules/features/pentest/recon.nix | 20++++++++++++++++++++
2 files changed, 21 insertions(+), 0 deletions(-)

diff --git a/modules/features/pentest/default.nix b/modules/features/pentest/default.nix @@ -20,6 +20,7 @@ pentest-core # ncat, socat, smbclient, kerberos, ldap; $PAYLOADS/$WORDLISTS pentest-wordlists # seclists, rockyou, searchsploit → $WORDLISTS pentest-python # one offensive python env; impacket by name + pentest-recon # port, service, host and DNS enumeration ]; }; } diff --git a/modules/features/pentest/recon.nix b/modules/features/pentest/recon.nix @@ -0,0 +1,20 @@ +# modules/features/pentest/recon.nix — finding hosts, ports and names. +{ lib, ... }: +(import ./_sets.nix { inherit lib; }) { + name = "recon"; + description = "port, service, host and DNS enumeration"; + + packages = pkgs: with pkgs; [ + nmap masscan rustscan naabu fscan + nbtscan enum4linux-ng snmpcheck onesixtyone thc-ipv6 + dnsrecon subfinder amass dnsx + httpx katana gowitness eyewitness whatweb + ]; + + expectedBins = [ + "nmap" "masscan" "rustscan" "naabu" "fscan" + "nbtscan" "enum4linux-ng" "snmp-check" "onesixtyone" + "dnsrecon" "subfinder" "amass" "dnsx" + "httpx" "katana" "gowitness" "whatweb" + ]; +}