pentest-recon-attack-surface

What problem does it solve?

Modern web architectures present complex, multi-source attack surfaces across external networks, authenticated browser sessions, and code. This skill consolidates external scan results, browser exploration, and source code analysis into a unified endpoint inventory augmented with authorization context to guide secure design and remediation.

Core Features & Use Cases

• Correlated reconnaissance: coalesces external technology fingerprints, deployment configs, and authenticated crawling to identify exposed endpoints and misconfigurations.
• Authz-aware mapping: extracts routes and middleware to construct a clear role/permission model and highlight missing or weak access controls.
• Actionable outputs: delivers an endpoint inventory, role architecture, and prioritized authorization vulnerability candidates for downstream code review.

Quick Start

Run the end-to-end reconnaissance workflow to generate an endpoint inventory with authorization metadata for your target application.