stress-recon

Enumerate subdomains, URLs, and endpoints for security assessments.

1|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/enderphan94/pentest-kit --skill stress-recon
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: stress-recon
Source: https://github.com/enderphan94/pentest-kit/tree/main/skills/stress-recon
Command: npx skills add https://github.com/enderphan94/pentest-kit --skill stress-recon

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires subfinder, httpx, ffuf, katana, gospider, waybackurls, arjun, gf, nuclei, and includes scripts (resource) and references (resource) components.

What problem does it solve?

It automates the discovery and mapping of subdomains, endpoints, and URLs to provide a complete attack surface overview for stress testing and security assessments.

Core Features & Use Cases

  • Subdomain Enumeration: Uses passive and active OSINT tools to discover all possible subdomains of a target domain.
  • Endpoint & URL Mapping: Maps live hosts, gathers URLs, parameters, and API endpoints across multiple phases.
  • Use Case: Quickly builds a comprehensive attack surface for penetration testing of web services and infrastructure.

Quick Start

Run the stress-recon skill with your target domain to automatically identify all assets and endpoints for your testing.

Frequently Asked Questions about stress-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate subdomain enumeration and endpoint discovery for stress testing?

Automating subdomain enumeration and endpoint discovery involves using OSINT tools to resolve active hosts and map URLs. This skill automates that process to build a comprehensive attack surface overview for security assessments.

Do I need to install subfinder and httpx before mapping web application attack vectors?

Yes, you need subfinder, httpx, ffuf, katana, and related tools installed. These dependencies are required to resolve, probe, and compile subdomains and endpoints efficiently during asset discovery.

What is the best way to map live hosts and API endpoints across multiple phases?

Mapping live hosts and API endpoints requires probing discovered assets and gathering URLs across multiple phases. This skill uses automated enumeration to compile application endpoints and identify potential attack vectors.

Can I use this skill for comprehensive URL mapping on infrastructure web services?

Yes, you can use this skill for URL mapping on infrastructure web services. It supports automated discovery and mapping of subdomains and endpoints to provide a complete attack surface overview for penetration testing.

Does subdomain enumeration with waybackurls and katana work for large target domains?

Subdomain enumeration with waybackurls and katana works for large target domains by gathering URLs and parameters passively and actively. The skill compiles these assets efficiently to map the full attack surface.