Enumerate web infrastructure and monitor changes
web2-reconskillsetup L3★1,791
elementalsouls/Claude-BugHunter ↗What it does
Enumerate subdomains, fingerprint services, and identify attack surface on web2 targets
Best for
Maps external attack surface comprehensively faster than manual DNS/port scanning.
Inputs
- · [object Object]
- · [object Object]
- · [object Object]
Outputs
- · [object Object]
- · [object Object]
- · [object Object]
Requires
- · nmap
- · SubFinder
- · Shodan/Censys APIs
- · cert transparency logs
Preconditions
Domain/IP accessible externally, recon scope approved
Failure modes
Rate limiting on APIs; DNS enumeration incomplete; services behind WAF hidden
Trust signals
- · Cert transparency integration
- · Rate-limit handling
- · Service version detection