Automate web2 reconnaissance to produce a prioritized asset list.
npx skills add https://github.com/venkatas/obsidian --skill web2-recon
Please help me install this Agent Skill. Skill: web2-recon Source: https://github.com/venkatas/obsidian/tree/main/skills/web2-recon Command: npx skills add https://github.com/venkatas/obsidian --skill web2-recon
Web2 reconnaissance often requires assembling data from many sources to map an attack surface. This skill automates subdomain enumeration, live host discovery, URL crawling, JS analysis, and continuous monitoring to produce a ready-to-hunt asset list.
Provide a target domain and run the web2-recon pipeline to generate a prioritized URL list ready for hunting.
High-intent search queries and answers about installing and using this skill.
Automate web2 recon by running a pipeline that aggregates subdomain data from subfinder, Chaos API, and assetfinder. It maps exposure surfaces by discovering live hosts, crawling URLs, and analyzing JS files to produce a prioritized asset list for hunting.
Mapping a web2 attack surface requires aggregating live hosts and URLs across domains, IPs, or subnets. This skill scales results from multiple sources using dnsx and httpx, outputting structured artifacts suitable for continuous monitoring and reporting.
Extract endpoints and secrets during asset discovery by integrating JS analysis tools like LinkFinder and SecretFinder. The pipeline analyzes crawled JavaScript files to identify hidden findings and incorporates them into the prioritized URL list.
Yes, you need external tools installed. The pipeline requires integration with subfinder, Chaos API, assetfinder, dnsx, httpx, katana, waybackurls, gau, LinkFinder, and SecretFinder to aggregate subdomain data, live hosts, URLs, and JS findings.
Yes, you can use this skill for continuous monitoring and threat surface mapping. It generates structured artifacts that support ongoing asset discovery, triggering new subdomain alerts and GitHub commit watches to track exposure changes over time.
URL crawling and historical collection in web2 reconnaissance works by gathering paths using katana, waybackurls, and gau. These tools aggregate current and historical URLs, feeding them into the pipeline to build a comprehensive prioritized asset list.
0xhaazRun web2 reconnaissance pipelines for subdomain enumeration, live host detection, and URL crawling.
chenchunrunAggregate threat intelligence, exploit status, and asset exposure for CVE risk assessment.
L3DigitalNetScan networks for hosts, ports, services, and operating systems using nmap.
transilienceaiCoordinate subdomain discovery and port scanning to build a domain attack surface inventory.
