A small arsenal for recon and bug bounty hunting.
🕶️ Mapping subdomains, checking alive hosts, building the hunter mindset.
A simple shell script to automate subdomain enumeration and host discovery.
Make sure you have these tools installed on your system:
./recon.sh target.comThis will generate:
subs_subfinder.txt→ Subdomains from Subfindersubs_assetfinder.txt→ Subdomains from Assetfindersubs_all.txt→ Unique merged subdomainsalive.txt→ Live hosts verified with httpx
./recon.sh hackerone.comOutput:
[*] Running Subfinder...
[*] Running Assetfinder...
[*] Merging and removing duplicates...
[*] Checking live hosts with httpx...
[*] Recon finished!
- Subdomains: subs_all.txt
- Alive hosts: alive.txt
- Add more tools (gau, gf, nuclei)
- Chain into vulnerability fuzzing
- Create advanced pipelines
Built by cr1pt0Kn1ght as part of the journey into Offensive Security and Bug Bounty Hunting.
“Stay low, recon everything, and strike with precision.”