domains / families / security / wp-mass-recon

wp-mass-recon

separate

Batch WP recon: users, CORS, XMLRPC, leaks across domains.

When to use

• You have an authorized target list from a bug bounty program, pentest engagement, or red team with signed RoE.
• Sector-wide recon within authorized scope.
• After `subfinder`/`crt.sh` produces a target list and you need to triage.
• You want maximum findings per minute with a parallelizable pipeline.

Skill page

Source