recon
Use recursive bug-bounty recon to discover, verify, and pivot domains, hosts, IPs, cloud assets, and JS signals into the next testing phase.
- License 许可
- GPL-3.0
- 最近更新
- 2026-08-21
- Stars
- ★ 3
- Forks
- 0
01 前言 Front Matter
- name
- recon
- files
- [ "01-setup-and-contract.md", "02-root-domains.md", "03-subdomains.md", "04-ip-addresses.md", "05-cloud-assets.md", "06-js-files.md", "07-state-transition-and-orchestration.md" ]
- description
- Use recursive bug-bounty recon to discover, verify, and pivot domains, hosts, IPs, cloud assets, and JS signals into the next testing phase.
- dependencies
- [ "agent-setup", "agent-calibration" ]
02 资源文件 7
- 参考文档01-setup-and-contract.md3.0 KB
- 参考文档02-root-domains.md2.7 KB
- 参考文档03-subdomains.md3.8 KB
- 参考文档04-ip-addresses.md2.6 KB
- 参考文档05-cloud-assets.md3.4 KB
- 参考文档06-js-files.md4.5 KB
- 参考文档07-state-transition-and-orchestration.md850 B
03 SKILL.md 正文
Load files sequentially on activation: see files list above. Only load the next file when the current file's steps are complete or explicitly requested. Do not preload all files at once.
04 同仓库更多 Skills
bug-hunt-framework
Security testing workflow assistant for recon, web, network, mobile, pwn, crypto, reverse engineering, and forensics phases.
web
Execute web-application assessment from setup and recon through injection, access control, auth/session issues, API, and SSRF chains.
reverse-engineering
Progress binary analysis from sample intake through static, anti-analysis, unpacking, dynamic tracing, VM reverse engineering, and symbolic review.
pwn
Advance pwn workflows from environment setup into stack, heap, format-string, UAF, integer, TOCTOU, kernel, and shellcode exploitation.
network
Assess network assets with non-destructive service mapping, auth posture checks, directory exposure reviews, remote access, and evidence-linked pivoting.
mobile
Drive mobile app testing from static extraction through TLS bypass, storage abuse, intent/WebView abuse, runtime hooks, and backend pivoting.