recon-skills

What the README says you get

• Analytics
  Attack-path analysisevidence review, attack-path analysis, and reporting
• API
  API mappingroute, parameter, JavaScript, source-map, and API mapping
• Auth
  Auth and session testingauthentication, authorization, session, OAuth, SAML, and MFA testing
• Other
  Subdomain and DNS discoverysubdomain, DNS, port, HTTP, and technology discovery
• Other
  Cloud and container pivotscloud, identity, container, and exposed-infrastructure pivots
• Other
  Recon playbookEnd-to-end recon workflow and escalation gates
• Other
  Bug bounty methodologyBug bounty methodology and prioritization
• Other
  Web attack-surface discoveryBroad web attack-surface discovery
• Other
  Port and service discoveryPort and service classification
• Other
  Web enumerationWeb paths, files, and technology enumeration
• Other
  JS secrets extractionClient-side bundle and secret analysis
• Other
  Report writingClient and bug bounty reporting
• Testing
  Vulnerability validationweb vulnerability and framework-specific validation

Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 1 unverifiable item was discarded. A README claim is the maker's description, not something we tested.