uphiago/recon-skills resource

Health v2 · maintenance only

Flags: no_releases young

Adoption not part of the score

1199 stars · 209 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated pack of Markdown skill files documenting reconnaissance and penetration-testing procedures for web apps, APIs, authentication, cloud, and infrastructure. It serves as a reference playbook collection for authorized security testing and bug bounty work rather than an executable tool.

Use cases

• learn web application penetration testing methodology
• find subdomain takeover and SSRF testing playbooks
• structure a bug bounty recon workflow
• reference OAuth and JWT attack techniques
• plan an external attack-surface assessment
• validate CORS, XSS, and SQLi vulnerabilities during engagements

When to choose

• you need field-tested step-by-step pentest and recon procedures
• you run authorized bug bounty or red team engagements and want a methodology reference
• you want documented prerequisites, pitfalls, and verification criteria per technique

When to avoid

• you expect runnable scanning or exploitation tooling - this is documentation, not a scanner
• you lack authorization to test the target systems
• you need automated continuous security monitoring

Facets

learning-resource · maturity active

penetration-testing security osint vulnerability-scanning developer-tools security penetration-testing osint developer-tools cli python bug-bounty red-team reconnaissance skill-pack markdown-playbooks offensive-security subdomain-enumeration ssrf wordpress-security jwt-attacks linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="uphiago/recon-skills")