skills.rest
grivera82
grivera82COMMUNITY
Explore all skills by this author →
GitHub

web2-recon

Automate web2 reconnaissance from subdomain enumeration to asset mapping.

Updated May 31, 2026
Search Tags:#monitoring#web-recon#subdomain-enumeration#live-host-discovery#url-crawling#js-analysis
One-click install
npx skills add https://github.com/grivera82/pi-bughunter --skill web2-recon-grivera82
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web2-recon
Source: https://github.com/grivera82/pi-bughunter/tree/main/skills/web2-recon
Command: npx skills add https://github.com/grivera82/pi-bughunter --skill web2-recon-grivera82

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web2 reconnaissance is often manual and slow; this skill automates subdomain enumeration, live-host discovery, URL crawling, and JS analysis to rapidly map the attack surface.

Core Features & Use Cases

  • Subdomain enumeration with multiple sources (subfinder, Chaos API, assetfinder) to quickly expand the surface.
  • Live-host discovery & URL crawling to build an actionable target list for hunting.
  • JS analysis & monitoring to identify changes and new assets for ongoing surveillance.
  • Use Case: Ideal at engagement kickoff to produce a prioritized URL list ready for testing and exploitation mapping.

Quick Start

Invoke the web2-recon skill against a target domain to start automated subdomain enumeration, live-host discovery, and URL crawling.

Frequently Asked Questions about web2-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web reconnaissance for subdomain enumeration and live-host discovery?▼

Web reconnaissance is automated by chaining tools like subfinder, assetfinder, and httpx to enumerate subdomains and discover live hosts. This skill orchestrates these external commands to rapidly map the attack surface without manual execution.

What is the best way to map a web2 attack surface from subdomains to JS analysis?▼

Mapping a web2 attack surface involves subdomain enumeration, URL crawling with katana, and JavaScript analysis using LinkFinder and SecretFinder. This skill automates that end-to-end pipeline to produce a prioritized target list for testing.

Do I need to install external tools like subfinder and ffuf before using this automation?▼

Yes, this automation requires a toolkit of external commands and templates including subfinder, Chaos API, dnsx, httpx, ffuf, and waybackurls. You must complete the configuration and installation of these dependencies before invoking the skill.

Can I use this skill for continuous monitoring of new web assets and JS changes?▼

Yes, continuous monitoring of web assets is supported to identify changes and new subdomains over time. It uses JavaScript analysis and URL crawling to maintain ongoing surveillance of the target's attack surface.

How does directory fuzzing fit into an automated web surface recon workflow?▼

Directory fuzzing is integrated into the web surface recon workflow using ffuf to discover hidden paths on live hosts. This occurs after subdomain enumeration and live-host discovery to build an actionable target list for exploitation mapping.

Related Skills

Explore More Software Engineering Skills→
AndyAnh174AndyAnh174

Red Team Tools and Methodology

Automate reconnaissance, subdomain enumeration, and vulnerability scanning with red team tools.

Community
Advanced
rahmatullahbossrahmatullahboss

WordPress Penetration Testing

Scan WordPress sites for vulnerabilities and enumerate users and plugins.

Community
Intermediate
jayjpatel9717jayjpatel9717

network-pentest-orchestration

Orchestrate network penetration tests with detection-first host discovery and port scanning.

Community
Advanced
mahmutkamahmutka
13

Pentest Recon Expert

Run PTES-aligned reconnaissance workflows for authorized penetration testing engagements.

Community
Advanced