web2-recon

Web2 reconnaissance automates subdomain enumeration and live host discovery by running a pipeline of tools like subfinder and httpx. You can execute the full asset discovery process using a simple script command against your target domain.

Continuous monitoring for new subdomains tracks your target's attack surface over time and triggers alerts. This reconnaissance process automates the detection of newly exposed assets and GitHub commits, keeping your penetration testing intelligence up to date.

URL crawling and directory fuzzing map web application attack surfaces by discovering hidden paths and parameters. This reconnaissance pipeline uses tools like katana, waybackurls, gau, and ffuf to automate endpoint discovery for security auditing.

JavaScript analysis uncovers hidden endpoints and secrets within JS files retrieved during web reconnaissance. By integrating this into your subdomain enumeration pipeline, you automate the extraction of sensitive intelligence from client-side code.

Yes, this web reconnaissance pipeline requires external dependencies including subfinder, httpx, nuclei, katana, waybackurls, gau, ffuf, and others. You must install these penetration testing tools in your environment before executing the automated asset discovery scripts.

Nuclei-templates provide the vulnerability scanning signatures for nuclei, while interactsh-client enables out-of-band interaction testing during web2 reconnaissance. These dependencies are essential for identifying vulnerabilities and capturing blind execution proof during security auditing.