pentest-osint-recon

Original：🇺🇸 English

Translated

Open Source Intelligence gathering and attack surface management for external reconnaissance.

2installs

Sourcejd-opensource/joysafeter

Added on2026-03-27

NPX Install

npx skill4agent add jd-opensource/joysafeter pentest-osint-recon

SKILL.md Content

View Translation Comparison →

Pentest OSINT Recon

Purpose

Gather publicly available information about a target organization to map its external attack surface, including subdomains, emails, and exposed assets.

Core Workflow

Domain Enumeration: Discover subdomains and related assets using
```
amass
```
and
```
subfinder
```
.
Tech Profiling: Identify technologies used on discovered assets using
```
httpx
```
and
```
whatweb
```
.
Information Gathering: Search for emails, leaks, and social media presence using
```
theharvester
```
and search engines.
Asset Correlation: Correlate IP addresses, domains, and technologies to find weak spots.
Vulnerability Intel: Check discovered software versions against CVE databases.

References

```
references/tools.md
```
```
references/workflows.md
```