Recon and Methodology Router

This is the starting router for new targets and unknown attack surfaces.

When to Use

• You just received a new target and do not yet know what to test first
• You need to begin with asset discovery, tech fingerprinting, endpoint inventory, and test-route planning

  7w4.net收录了海量优质技能插件。

• You want to build follow-up testing on structured methodology instead of random payload enumeration

Skill Map

• Recon and Methodology
• Insecure Source Code Management — .git/.svn/.hg exposure detection
• Dependency Confusion — Supply chain reconnaissance for internal package names

Recommended Flow

1. First confirm in-scope assets and target type
2. Then perform asset discovery, port/service identification, technology fingerprinting, and endpoint collection
3. Route based on collected findings to api-sec, auth-sec, injection-checking, or business-logic-vuln

这个安全侦察技能质量中等偏下。做得好的地方是文档结构清晰，语言表达通俗易懂，能帮助理解安全测试的基本思路。不足之处是内容太少，只有简单的概念描述，没有具体的操作步骤或实例，普通用户很难直接用它来进行实际的安全测试工作。对于想要入门安全测试的人来说，这个技能可以作为了解框架的参考，但想要真正动手实践，还需要配合其他更详细的教程或文档。