perseus:scan

To map application architecture and identify vulnerabilities, you perform reconnaissance to discover entry points and security patterns, building a Target Knowledge Graph. This covers web applications, APIs, and microservices to reveal the attack surface for risk assessment.

Attack surface mapping discovers and catalogs entry points and security patterns across microservices. It works by coordinating Phase 1 discovery and Phase 2 mapping tasks, tracing XSS and SSRF sinks to produce a structured Target Knowledge Graph for vulnerability research.

You can perform a full automated security assessment by running an aggregated start command that executes both Phase 1 reconnaissance and Phase 2 mapping sequentially. This builds the complete Target Knowledge Graph, mapping entry points and security patterns efficiently.

Yes, this reconnaissance approach supports both web applications and APIs. The architecture scanning and entry point mapping tasks are designed to apply to web applications, APIs, and microservices, ensuring comprehensive attack surface coverage across different target types.

The best way to document entry points and injection sinks for vulnerability reporting is generating a Target Knowledge Graph. This synthesis deliverable structures Phase 1 and Phase 2 findings, providing a comprehensive foundation for Phase 3 reporting.

You should begin Phase 1 reconnaissance for initial architecture discovery and entry point mapping, then proceed to Phase 2 surface mapping. Phase 2 focuses on hunting specific injection sinks, tracing SSRF, and auditing data security based on Phase 1 foundations.