recon-methodology

To systematically enumerate an attack surface, you map site structure, fingerprint technology stacks, identify input points, and collect signals to inform subsequent pentest tasks. This structured reconnaissance provides a checklist covering web apps, APIs, and infrastructure for actionable planning.

During web application reconnaissance, collect signals detailing site structure, technology stacks, input points, authentication patterns, and business workflows. Outputting a structured signal list informs task selection and prioritization during the full-scope penetration testing engagement.

You can automate attack surface mapping by integrating with agent-browser to perform automated exploration. This collaboration operates within safety constraints while fingerprinting technologies and collecting reconnaissance signals across the target's web apps and infrastructure.

This reconnaissance methodology works for APIs, infrastructure, and web apps across full-scope pentest engagements. It systematically enumerates target attack surfaces by detailing structure, technology stacks, input points, auth patterns, and business workflows for each environment.

Prioritize penetration testing tasks by using the structured signal list generated from mapping the attack surface. These collected signals determine the relevance of subsequent tasks, guiding actionable planning and task selection during the engagement.

The best way to fingerprint technology stacks during pentest reconnaissance is to apply a systematic methodology that maps site structure and input points. This process collects actionable signals detailing the technology stack and authentication patterns for follow-up tasks.