domains / families / security / web2-recon

web2-recon

authentic

Web2 recon pipeline — subdomain enumeration (subfinder, Chaos API, assetfinder), live host discovery (dnsx, httpx), URL crawling (katana, waybackurls, gau), directory fuzzing (ffuf), JS analysis (LinkFinder, SecretFinder), continuous monitoring (new subdomain alerts, JS change detection, GitHub commit watch). Use when starting recon on any web2 target or when asked about asset discovery, subdomain enum, or attack surface mapping.

When to use

• subdomain enumeration
• live host discovery
• URL crawling
• directory fuzzing
• JS analysis
• continuous monitoring
• asset discovery
• attack surface mapping

Skill page

Source