recon-playbook

What problem does it solve?

This Skill eliminates inefficient, ad-hoc reconnaissance workflows that miss high-value vulnerabilities when time is limited during penetration testing engagements, ensuring maximum findings per minute across batches of target domains.

Core Features & Use Cases

• 4-Phase Optimized Pipeline: Orchestrates target generation, live host filtering, deep WordPress checks, and high-value target escalation in a proven sequence distilled from 9 waves of testing across 600+ domains.
• Empirical Evasion Tuning: Includes pre-tested threading limits, user agent rotation, and rate limiting evasion techniques to avoid blocks during large-scale scans.
• Consolidated Reporting: Automatically generates sector vulnerability reports and 3-doc target suites (master report, attack surface, exploit chains) for high-value findings.
• Use Case: A penetration tester running batch recon across 500 US small business domains can use this Skill to quickly identify WordPress, CORS, and XMLRPC vulnerabilities, prioritize the highest-risk targets, and produce actionable reports for exploitation.

Quick Start

Use the recon-playbook skill to run a full 4-phase reconnaissance pipeline on your list of target domains to identify high-value WordPress vulnerabilities and generate a consolidated sector vulnerability report.