domains / families / security / visual-recon
visual-recon
separate
Screenshot all live hosts for rapid visual triage and technology fingerprinting.
When to use
- You have 100+ live subdomains and need to prioritize targets quickly.
- Manual browsing is too slow for bulk reconnaissance.
- Need to identify default install pages (WordPress setup, phpMyAdmin login, Jenkins dashboard).
- Want to compare visual fingerprints across subdomains (shared infrastructure).
- Target serves different content based on User-Agent or geolocation.
When not to use
- manual browsing
- CAPTCHA hosts
Skill page
Source