Разведка веб-цели и картографирование поверхности атаки

★ 8.1 · research

web2-recon is a Claude Code skill that runs a full web2 reconnaissance pipeline — from zero to a prioritized URL list ready for vulnerability hunting. The pipeline covers passive subdomain enumeration via crt.sh, Chaos API, subfinder, and assetfinder; live host discovery with dnsx and httpx; URL crawling using katana, waybackurls, and gau; directory fuzzing with ffuf; JavaScript analysis through LinkFinder and SecretFinder; and nuclei scanning against critical and high-severity templates. Attack surface triage classifies collected URLs with gf patterns for XSS, SSRF, IDOR, SQLi, LFI, RCE, and open redirect, while also extracting API endpoints, file upload paths, and admin routes. The skill targets bug bounty hunters and penetration testers who need to systematically map the attack surface of any web2 target from scratch.