visual-recon

What problem does it solve?

Manually reviewing hundreds of live subdomains to identify high-value targets, default admin panels, and technology stacks is extremely time-consuming and impractical for large-scale reconnaissance efforts during authorized security assessments.

Core Features & Use Cases

• Bulk Screenshot Capture: Automatically screenshot all alive hosts from a subdomain list to enable visual triage instead of manual browsing.
• Technology Fingerprinting: Integrate with tools like httpx and whatweb to identify CMS, frameworks, and server types from captured screenshots and scan output.
• Target Prioritization: Filter screenshots for high-value patterns like login pages, admin dashboards, default install pages, and error stack traces to focus testing efforts.
• Use Case: For a target with 500+ alive subdomains, use this skill to quickly identify exposed phpMyAdmin panels, Jenkins dashboards, and WordPress install pages without opening each URL individually.

Quick Start

Use the visual-recon skill to screenshot all hosts in your alive subdomains list, filter for login and admin interfaces, and generate a prioritized list of high-value targets for further security testing.