domains / families / security / attack-surface-mapping

attack-surface-mapping

separate

Draw a testable attack surface from one authorized target URL or one application. Use when the user says 攻击面, 供给面, 画攻击面, map the surface, application recon, find the business host, JS inventory, or when the only visible page is login. Derive hosts, APIs, keys, and the object graph from what the app already exposes. Do not open with directory brute or payload spray. Use when the user runs /attack-surface-mapping.

When to use

• mapping attack surface
• application recon
• finding business host
• JS inventory
• deriving hosts and APIs
• identifying keys and object graph
• classifying response classes
• handling login-only pages

When not to use

• directory brute force
• payload spraying
• password spraying
• expanding organization-wide host universe
• auditing identity products
• vulnerability testing
• captcha OCR
• slider farms

Skill page

Source