domains / families / security / recon-playbook

recon-playbook

separate

Use when starting or restructuring an authorized external web and API assessment.

When to use

• Beginning an external web, API, or bug bounty assessment.
• Recon output exists but lacks normalization, provenance, or prioritization.
• The target spans multiple applications, subdomains, or identity boundaries.
• A broad scan needs to be converted into focused manual validation.

When not to use

• Justifying activity outside the agreed scope
• Running every available tool against every asset

Skill page

Source