Interactive tool // Offensive Security
Recon-to-Report Playbook.
A guided pentest workflow across six phases — recon, scanning, enumeration, exploitation, post-exploitation, and reporting. Paste an Nmap scan and it suggests the right tools for what was actually found, then keeps a checklist so nothing gets missed.
- Nmap-aware
- Methodology
- Checklist
- Reporting
Paste your Nmap output and (optionally) a target host, then click Parse scan & suggest tools. Each phase tab opens with recommendations matched to the services the scan found, a standard checklist underneath, and a full tool reference you can search. Everything saves to this browser only — use Export checklist for a Markdown copy.
Paste an Nmap scan (-sV -sC output works best) and set a target host, then work your way across the phases below. Each phase opens with tool suggestions matched to what the scan actually found, followed by a standard checklist so nothing gets skipped. Everything is saved to this browser only.
-oN) output, or just the port lines — the parser looks for lines starting with PORT/proto.{host} in suggested commands below.