skills.rest
zer0xhamid
zer0xhamidCOMMUNITY
Explore all skills by this author →
GitHub

web2-recon

Orchestrate subdomain enumeration, live-host discovery, URL crawling, and JS analysis into a structured surface map.

1|Updated Mar 19, 2026
Search Tags:#monitoring#reconnaissance#subdomain-enumeration#live-host-discovery#url-crawling#js-analysis#web2
One-click install
npx skills add https://github.com/zer0xhamid/LogicHunter_v2 --skill web2-recon-zer0xhamid
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web2-recon
Source: https://github.com/zer0xhamid/LogicHunter_v2/tree/main/skills/web2-recon
Command: npx skills add https://github.com/zer0xhamid/LogicHunter_v2 --skill web2-recon-zer0xhamid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web2 reconnaissance often requires coordinating multiple tools to identify subdomains, live hosts, and potential attack surfaces. This skill consolidates subdomain enumeration, live-host discovery, URL crawling, JS analysis, and continuous monitoring into a unified workflow, reducing manual orchestration and accelerating reconnaissance cycles.

Core Features & Use Cases

  • Subdomain enumeration across Chaos API, subfinder, and assetfinder to rapidly build a comprehensive target surface.
  • Live host discovery and URL collection using dnsx, httpx, katana, gau, and Wayback-like sources to surface reachable endpoints for testing.
  • JS analysis & continuous monitoring through LinkFinder and SecretFinder, with change alerts and GitHub commit watching to detect surface drift.
  • Use Case: When starting recon on a new web2 target, deploy this pipeline to generate a prioritized list of live URLs and assets for attack surface mapping and test planning.

Quick Start

Run the web2-recon pipeline against a target to enumerate subdomains, discover live hosts, crawl URLs, and surface JS signals for prioritization.

Frequently Asked Questions about web2-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web2 reconnaissance for attack surface mapping?▼

Continuous attack surface monitoring tracks subdomain changes and watches GitHub commits to detect surface drift over time. It alerts you to new live hosts and JS signals, ensuring your reconnaissance data remains current for ongoing test planning.

How do I discover live hosts and crawl URLs for web2 targets?▼

Live host discovery and URL crawling use dnsx, httpx, katana, and gau to surface reachable endpoints. These tools parse outputs into a structured surface map, providing a prioritized list of live URLs for testing and attack surface mapping.

Does this reconnaissance pipeline support subdomain enumeration via Chaos API and subfinder?▼

Yes, subdomain enumeration aggregates results across the Chaos API, subfinder, and assetfinder. This combination rapidly builds a comprehensive target surface by consolidating multiple data sources into a single structured output.

Can I extract secrets and endpoints from JavaScript files during web2 recon?▼

JS analysis during web2 reconnaissance utilizes LinkFinder and SecretFinder to surface hidden endpoints and secrets. This process extracts potential attack vectors from JavaScript files, feeding the results into subsequent attack modules for prioritization.

What is the best way to monitor web2 surface drift continuously?▼

Continuous monitoring for surface drift applies JS analysis and GitHub commit watching to detect new assets and changes. This approach alerts you to evolving attack surfaces, maintaining an updated structured surface map for ongoing reconnaissance.

Related Skills

Explore More Software Engineering Skills→
grivera82grivera82

web2-recon

Automate web2 reconnaissance from subdomain enumeration to asset mapping.

Community
Advanced
dawsonblockdawsonblock

Exploitability Validation Skill

Validate vulnerability findings for reachability and exploitability using staged artifacts.

Community
Advanced
elementalsoulselementalsouls
3.3k

web2-recon

Automates web asset discovery and surface mapping using standard recon tools.

Community
Advanced
Mikacr1138Mikacr1138
2

web2-recon

Automate web2 reconnaissance from subdomain enumeration to JS analysis.

Community
Intermediate