Recon For Sec

About

This is the starting router for new targets and unknown attack surfaces You just received a new target and do not yet know what to test first You need to begin with asset discovery tech fingerprinting endpoint inventory and test route planning You want to build follow up testing on structured methodology instead of random payload enumeration Recon and Methodology recon and methodology SKILL md Insecure Source Code Management insecure source code management SKILL md git svn hg exposure detection Dependency Confusion dependency confusion SKILL md Supply chain reconnaissance for internal package names 1 First confirm in scope assets and target type 2 Then perform asset discovery port service identification technology fingerprinting and endpoint collection 3 Route based on collected findings to api sec api sec SKILL md auth sec auth sec SKILL md injection checking injection checking SKILL md or business logic vuln business logic vuln SKILL md

• Entry P1 category router for reconnaissance and methodology. Use when mapping
• scope, discovering assets, fingerprinting technology, building endpoint
• inventory, and choosing the first high-value security testing path.
• Follow recon-for-sec SKILL.md steps and documented constraints.
• Follow recon-for-sec SKILL.md steps and documented constraints.