Web 应用侦察 (Web Reconnaissance)

Web reconnaissance maps a target's attack surface by performing liveliness checks, header fingerprinting, directory enumeration, and sensitive-file discovery to identify exposure points and potential vulnerabilities.

Header fingerprinting identifies technology stacks, while directory enumeration reveals hidden paths and sensitive files, systematically mapping exposure points across the target web application.

Begin web reconnaissance by curling the target's homepage to verify live status, then perform a directory scan and inspect headers to fingerprint the technology stack.

Yes, the reconnaissance workflow includes port and service fingerprinting alongside technology identification to surface exposure points for vulnerability discovery and security testing.

No dependencies are required for core enumeration tasks. The workflow supports optional resources like scripts and references to extend frontmatter-driven discovery workflows.

Systematic web reconnaissance is needed before vulnerability discovery to identify live targets, fingerprint technology stacks, and map exposure points through sensitive-file discovery.