#recon — Public Fediverse posts

#recon

∞ on fascism
with Kavita Krishnan
► https://rec-on.org/onfascism.html
questionnaire: https://etherpad.wikimedia.org/p/antifascistQUestionnaire

#sonictechnologies

~ 'focused listening'
with Jana Winderen
► https://rec-on.org/focusedlistening.html

⟿ weassemblage {chúng ta hội đồng}
❰ vietnamese language ↂ sound & feminisms with Linhhafornow with Elise Luong (undecided productions), AGF & more
► https://rec-on.org/weassemblage.html

#recon

∞ on fascism
with Kavita Krishnan
► https://rec-on.org/onfascism.html
questionnaire: https://etherpad.wikimedia.org/p/antifascistQUestionnaire

#sonictechnologies

~ 'focused listening'
with Jana Winderen
► https://rec-on.org/focusedlistening.html

⟿ weassemblage {chúng ta hội đồng}
❰ vietnamese language ↂ sound & feminisms with Linhhafornow with Elise Luong (undecided productions), AGF & more
► https://rec-on.org/weassemblage.html

#recon

∞ on fascism
with Kavita Krishnan
► https://rec-on.org/onfascism.html
questionnaire: https://etherpad.wikimedia.org/p/antifascistQUestionnaire

#sonictechnologies

~ 'focused listening'
with Jana Winderen
► https://rec-on.org/focusedlistening.html

⟿ weassemblage {chúng ta hội đồng}
❰ vietnamese language ↂ sound & feminisms with Linhhafornow with Elise Luong (undecided productions), AGF & more
► https://rec-on.org/weassemblage.html

#recon

∞ on fascism
with Kavita Krishnan
► https://rec-on.org/onfascism.html
questionnaire: https://etherpad.wikimedia.org/p/antifascistQUestionnaire

#sonictechnologies

~ 'focused listening'
with Jana Winderen
► https://rec-on.org/focusedlistening.html

⟿ weassemblage {chúng ta hội đồng}
❰ vietnamese language ↂ sound & feminisms with Linhhafornow with Elise Luong (undecided productions), AGF & more
► https://rec-on.org/weassemblage.html

Revera (Pentest Tools) — un nouvel outil d'énumération et de reconnaissance. Dans la boîte à outils offensive, la phase de recon reste souvent la plus déterminante : ce qu'on ne voit pas de sa propre surface, un adversaire le cartographie à notre place. Tester ses propres angles morts, c'est toujours une bonne idée. #infosec #OSINT #recon
https://kitploit.com/en/tools/github/aaravmaloo/revera

Passive recon with Responder: -A analyze mode listens for LLMNR, NBT-NS, and mDNS traffic without poisoning. Logs verbose name-resolution requests to map vulnerable hosts before any attack. Perfect for Kali 2024.1 and Debian 12. #responder #snippet #analyze #recon #ValtersIT

https://www.valtersit.com/vault/responder-in-analyze-mode-to-map-network-protocols-27b130/

Passive recon with Responder: -A analyze mode listens for LLMNR, NBT-NS, and mDNS traffic without poisoning. Logs verbose name-resolution requests to map vulnerable hosts before any attack. Perfect for Kali 2024.1 and Debian 12. #responder #snippet #analyze #recon #ValtersIT

https://www.valtersit.com/vault/responder-in-analyze-mode-to-map-network-protocols-27b130/

"Why navies still matter in the age of drones", a well argued analysis from an expert: Sean Andrews (retired Royal Australian Navy Captain and currently a senior research fellow at the Strategy, Statecraft and Technology). A short and informative reading read:

Link:
https://www.aspistrategist.org.au/why-navies-still-matter-in-the-age-of-drones/

#DroneWarfare #FleetPlatforms #Deterence #GunDiplomacy #TradeRoutes #ChokePoints #ShowingTheFlag #Alliances #MassEffects #Surveillance #Recon #CapitalCosts #Resilience #Logistcs #Adaptability #TechnologyLessons

"Why navies still matter in the age of drones", a well argued analysis from an expert: Sean Andrews (retired Royal Australian Navy Captain and currently a senior research fellow at the Strategy, Statecraft and Technology). A short and informative reading read:

Link:
https://www.aspistrategist.org.au/why-navies-still-matter-in-the-age-of-drones/

#DroneWarfare #FleetPlatforms #Deterence #GunDiplomacy #TradeRoutes #ChokePoints #ShowingTheFlag #Alliances #MassEffects #Surveillance #Recon #CapitalCosts #Resilience #Logistcs #Adaptability #TechnologyLessons

"Why navies still matter in the age of drones", a well argued analysis from an expert: Sean Andrews (retired Royal Australian Navy Captain and currently a senior research fellow at the Strategy, Statecraft and Technology). A short and informative reading read:

Link:
https://www.aspistrategist.org.au/why-navies-still-matter-in-the-age-of-drones/

#DroneWarfare #FleetPlatforms #Deterence #GunDiplomacy #TradeRoutes #ChokePoints #ShowingTheFlag #Alliances #MassEffects #Surveillance #Recon #CapitalCosts #Resilience #Logistcs #Adaptability #TechnologyLessons

"Why navies still matter in the age of drones", a well argued analysis from an expert: Sean Andrews (retired Royal Australian Navy Captain and currently a senior research fellow at the Strategy, Statecraft and Technology). A short and informative reading read:

Link:
https://www.aspistrategist.org.au/why-navies-still-matter-in-the-age-of-drones/

#DroneWarfare #FleetPlatforms #Deterence #GunDiplomacy #TradeRoutes #ChokePoints #ShowingTheFlag #Alliances #MassEffects #Surveillance #Recon #CapitalCosts #Resilience #Logistcs #Adaptability #TechnologyLessons

Как мой FullMute эволюционировал за время

Привет, Хабр! Прошло достаточно много времени с написания моей первой статьи о сканере, который принёс мне выплату в багбаунти. Кто не знает, его суть в получении технологий на сайте, после чего проверки на CVE в массовом обличье. Сегодня я бы хотел рассказать о том, как он эволюционировал, какие были исправления и новшества.

https://habr.com/ru/articles/1058920/

#scanner #pentest #recon #develop #github

Как мой FullMute эволюционировал за время

Привет, Хабр! Прошло достаточно много времени с написания моей первой статьи о сканере, который принёс мне выплату в багбаунти. Кто не знает, его суть в получении технологий на сайте, после чего проверки на CVE в массовом обличье. Сегодня я бы хотел рассказать о том, как он эволюционировал, какие были исправления и новшества.

https://habr.com/ru/articles/1058920/

#scanner #pentest #recon #develop #github

Как мой FullMute эволюционировал за время

Привет, Хабр! Прошло достаточно много времени с написания моей первой статьи о сканере, который принёс мне выплату в багбаунти. Кто не знает, его суть в получении технологий на сайте, после чего проверки на CVE в массовом обличье. Сегодня я бы хотел рассказать о том, как он эволюционировал, какие были исправления и новшества.

https://habr.com/ru/articles/1058920/

#scanner #pentest #recon #develop #github

If you're in London for #Recon #fetishweekLondon on Saturday 11 July and ever thought about hosting your own community event, you could pick up a lot from @HisNameIsOx at the Masterclass session.
This guy has hosted many events and offers knowledge and guidance like no other, so you might as well tap up a valuable resource and check it out.

If you're in London for #Recon #fetishweekLondon on Saturday 11 July and ever thought about hosting your own community event, you could pick up a lot from @HisNameIsOx at the Masterclass session.
This guy has hosted many events and offers knowledge and guidance like no other, so you might as well tap up a valuable resource and check it out.

If you're in London for #Recon #fetishweekLondon on Saturday 11 July and ever thought about hosting your own community event, you could pick up a lot from @HisNameIsOx at the Masterclass session.
This guy has hosted many events and offers knowledge and guidance like no other, so you might as well tap up a valuable resource and check it out.

If you're in London for #Recon #fetishweekLondon on Saturday 11 July and ever thought about hosting your own community event, you could pick up a lot from @HisNameIsOx at the Masterclass session.
This guy has hosted many events and offers knowledge and guidance like no other, so you might as well tap up a valuable resource and check it out.

I just threw a one shot loop prompt to get a virtual SQL server for #radare2 https://github.com/radareorg/radare2-vsql inspired in all the plugins presented by @0xeb at #recon

I just threw a one shot loop prompt to get a virtual SQL server for #radare2 https://github.com/radareorg/radare2-vsql inspired in all the plugins presented by @0xeb at #recon

I just threw a one shot loop prompt to get a virtual SQL server for #radare2 https://github.com/radareorg/radare2-vsql inspired in all the plugins presented by @0xeb at #recon

I just threw a one shot loop prompt to get a virtual SQL server for #radare2 https://github.com/radareorg/radare2-vsql inspired in all the plugins presented by @0xeb at #recon

I just threw a one shot loop prompt to get a virtual SQL server for #radare2 https://github.com/radareorg/radare2-vsql inspired in all the plugins presented by @0xeb at #recon

https://www.evshift.com/476856/taubik-recon-vs-talaria-x3-mini-electric-dirt-bike-race-viral-race-dirtbikes/ Taubik Recon VS Talaria X3 Mini Electric Dirt Bike RACE!! #viral #race #dirtbikes #bike #Dirt #Dirtbikes #ELECTRIC #ElectricBikes #ElectricMotorcycles #ElectricVehicles #EV #mini #motorcycles #race #Recon #Talaria #taubik #viral

I'll be at @recon this week, Thursday to Sunday! Looking forward to catching up with folks! Come say hi!

#ReconMTL #REcon #REcon2026

I'll be at @recon this week, Thursday to Sunday! Looking forward to catching up with folks! Come say hi!

#ReconMTL #REcon #REcon2026

I'll be at @recon this week, Thursday to Sunday! Looking forward to catching up with folks! Come say hi!

#ReconMTL #REcon #REcon2026

I'll be at @recon this week, Thursday to Sunday! Looking forward to catching up with folks! Come say hi!

#ReconMTL #REcon #REcon2026

I'll be at @recon this week, Thursday to Sunday! Looking forward to catching up with folks! Come say hi!

#ReconMTL #REcon #REcon2026

Apparently the #Recon app on Android is no longer functional and the new web interface launched? Interesting.

Apparently the #Recon app on Android is no longer functional and the new web interface launched? Interesting.

#Military #Recon https://www.deviantart.com/alexandriabrangwin/art/Reconnuisance-1341709214

#Military #Recon https://www.deviantart.com/alexandriabrangwin/art/Reconnuisance-1341709214

#Military #Recon https://www.deviantart.com/alexandriabrangwin/art/Reconnuisance-1341709214

#Military #Recon https://www.deviantart.com/alexandriabrangwin/art/Reconnuisance-1341709214

#Military #Recon https://www.deviantart.com/alexandriabrangwin/art/Reconnuisance-1341709214

#Military #Recon www.deviantart.com/alexandriabr...

Reconnuisance by alexandriabra...

1.1 billion out of 6.3 billion people across 109 countries live in multidimensional poverty.

https://hdr.undp.org/content/2025-global-multidimensional-poverty-index-mpi#/indicies/MPI

via @REConSOUND

#recon: on #poverty
agf & porya hatami
► https://rec-on.org/onpoverty.html

the poem & reader
https://pad.riseup.net/p/recononpoverty-keep

1.1 billion out of 6.3 billion people across 109 countries live in multidimensional poverty.

https://hdr.undp.org/content/2025-global-multidimensional-poverty-index-mpi#/indicies/MPI

via @REConSOUND

#recon: on #poverty
agf & porya hatami
► https://rec-on.org/onpoverty.html

the poem & reader
https://pad.riseup.net/p/recononpoverty-keep

1.1 billion out of 6.3 billion people across 109 countries live in multidimensional poverty.

https://hdr.undp.org/content/2025-global-multidimensional-poverty-index-mpi#/indicies/MPI

via @REConSOUND

#recon: on #poverty
agf & porya hatami
► https://rec-on.org/onpoverty.html

the poem & reader
https://pad.riseup.net/p/recononpoverty-keep

1.1 billion out of 6.3 billion people across 109 countries live in multidimensional poverty.

https://hdr.undp.org/content/2025-global-multidimensional-poverty-index-mpi#/indicies/MPI

via @REConSOUND

#recon: on #poverty
agf & porya hatami
► https://rec-on.org/onpoverty.html

the poem & reader
https://pad.riseup.net/p/recononpoverty-keep

1.1 billion out of 6.3 billion people across 109 countries live in multidimensional poverty.

https://hdr.undp.org/content/2025-global-multidimensional-poverty-index-mpi#/indicies/MPI

via @REConSOUND

#recon: on #poverty
agf & porya hatami
► https://rec-on.org/onpoverty.html

the poem & reader
https://pad.riseup.net/p/recononpoverty-keep

Target: www.nambla.org

Recon: https://h1.nu/1pJ6M

Enjoy

#Recon
#GlitterSquad

Target: www.nambla.org

Recon: https://h1.nu/1pJ6M

Enjoy

#Recon
#GlitterSquad

Advanced Subdomain Discovery with Amass and Cheat Sheet

In this cheat sheet, I cover essential Amass commands, enumeration techniques, and practical workflows for effective recon.
https://denizhalil.com/2026/05/02/owasp-amass-subdomain-enumeration-cheat-sheet/

#CyberSecurity #OWASP #Amass #SubdomainEnumeration #Recon #OSINT #AttackSurface #BugBounty

Advanced Subdomain Discovery with Amass and Cheat Sheet

In this cheat sheet, I cover essential Amass commands, enumeration techniques, and practical workflows for effective recon.
https://denizhalil.com/2026/05/02/owasp-amass-subdomain-enumeration-cheat-sheet/

#CyberSecurity #OWASP #Amass #SubdomainEnumeration #Recon #OSINT #AttackSurface #BugBounty

Advanced Subdomain Discovery with Amass and Cheat Sheet

In this cheat sheet, I cover essential Amass commands, enumeration techniques, and practical workflows for effective recon.
https://denizhalil.com/2026/05/02/owasp-amass-subdomain-enumeration-cheat-sheet/

#CyberSecurity #OWASP #Amass #SubdomainEnumeration #Recon #OSINT #AttackSurface #BugBounty

----------------

🛠️ Tool
===================

Opening: Claude-OSINT is a paired set of Claude skills intended to operationalize offensive reconnaissance inside a Claude skills environment. The project bundles a methodology skill (osint-methodology) and a tactical skill (offensive-osint) to provide structured tradecraft, scoring rules, and probe paths tailored for authorized red-team and bug-bounty engagements.

Key Features:
• Modular skills: Two self-contained SKILL.md files that prime Claude for strategy and tactics respectively.
• Broad coverage: ~5,500 lines of tradecraft, 90+ recon modules, 48 secret-regex patterns, 80+ dorks, 9 read-only credential validators, and 27 attack-path templates.
• Recon capabilities: Subdomain discovery stacks (crt.sh + fallback), Wayback/CDX deep mining, WHOIS/RDAP pivots, bulk IP→ASN mappings, and public-records pivots such as OpenCorporates and SEC EDGAR.
• Identity & SSO mapping: Fingerprinting and enumeration for Microsoft Entra/M365, Okta tenant slugs, ADFS metadata, Google Workspace OIDC discovery, and generic OIDC/SAML paths.
• App surface discovery: Swagger/OpenAPI discovery paths, GraphQL discovery and field-enumeration strategies, always-on HTTP checks (common sensitive files and endpoints), and security header audits.

Technical Implementation:
• The repository structure centers on skills/ containing SKILL.md files that encode prompts, heuristics, regexes and scoring rules, plus a small standard-library-only secret_scan.py for local secret scanning.
• The approach is to supply Claude with structured tradecraft (procedural steps, regex tiers, payload ideas, and scoring thresholds) rather than a runnable scanner binary.

Use Cases:
• Red-team external recon phases with time-budgeted pipelines (1h/4h/1d/1w).
• Bug-bounty reconnaissance to enumerate SSO, open APIs, and legacy backups using crafted dorks and regexes.
• Augmenting human analysts by surfacing prioritized attack paths and identity pivots.

Limitations:
• The repository provides methodology and prompting artifacts rather than turnkey scanning infrastructure; operationalization requires an authorized Claude skills environment.
• No active exploitation tooling is included; focus remains on discovery, mapping, and validation primitives.

🔹 tool #osint #recon #pentesting

🔗 Source: https://github.com/elementalsouls/Claude-OSINT

Кастомные вордлисты для самых маленьких

Ни для кого не секрет, что качественные вордлисты - это ключ к эффективному фаззингу и, как следствие, большему покрытию скоупа и хорошим файндингам во время пентеста и баг-баунти. Однако вордлисты в общем доступе далеко не всегда дадут достаточное покрытие, какими бы большими они ни были. У веб-приложения может быть свой специфический нейминг путей и параметров. Некоторые ручки могут находиться на внескоуповых доменах и дублироваться на скоуповых, иногда даже с измененной функциональностью. Часть параметров и вовсе не удастся найти без ручного анализа JavaScript-кода приложения. Здесь в игру вступают кастомные вордлисты, закрывающие все вышеперечисленные нюансы. Благодаря ним можно значительно эффективнее проводить фаззинг путей веб-приложения, а также брутить параметры его запросов. Эта статья - первая из цикла про кастомные словари, рассказывающая про сбор базового вордлиста без особых усилий. В следующей статье я расскажу про создание более комплексного кастомного вордлиста, требующего больших затрат по времени.

https://habr.com/ru/companies/deiteriylab/articles/1029012/

#информационная_безопасность #пентест #фаззинг #багбаунти #безопасность_вебприложений #burp_suite #ffuf #recon #api_testing

Кастомные вордлисты для самых маленьких

Ни для кого не секрет, что качественные вордлисты - это ключ к эффективному фаззингу и, как следствие, большему покрытию скоупа и хорошим файндингам во время пентеста и баг-баунти. Однако вордлисты в общем доступе далеко не всегда дадут достаточное покрытие, какими бы большими они ни были. У веб-приложения может быть свой специфический нейминг путей и параметров. Некоторые ручки могут находиться на внескоуповых доменах и дублироваться на скоуповых, иногда даже с измененной функциональностью. Часть параметров и вовсе не удастся найти без ручного анализа JavaScript-кода приложения. Здесь в игру вступают кастомные вордлисты, закрывающие все вышеперечисленные нюансы. Благодаря ним можно значительно эффективнее проводить фаззинг путей веб-приложения, а также брутить параметры его запросов. Эта статья - первая из цикла про кастомные словари, рассказывающая про сбор базового вордлиста без особых усилий. В следующей статье я расскажу про создание более комплексного кастомного вордлиста, требующего больших затрат по времени.

https://habr.com/ru/companies/deiteriylab/articles/1029012/

#информационная_безопасность #пентест #фаззинг #багбаунти #безопасность_вебприложений #burp_suite #ffuf #recon #api_testing

Кастомные вордлисты для самых маленьких

Ни для кого не секрет, что качественные вордлисты - это ключ к эффективному фаззингу и, как следствие, большему покрытию скоупа и хорошим файндингам во время пентеста и баг-баунти. Однако вордлисты в общем доступе далеко не всегда дадут достаточное покрытие, какими бы большими они ни были. У веб-приложения может быть свой специфический нейминг путей и параметров. Некоторые ручки могут находиться на внескоуповых доменах и дублироваться на скоуповых, иногда даже с измененной функциональностью. Часть параметров и вовсе не удастся найти без ручного анализа JavaScript-кода приложения. Здесь в игру вступают кастомные вордлисты, закрывающие все вышеперечисленные нюансы. Благодаря ним можно значительно эффективнее проводить фаззинг путей веб-приложения, а также брутить параметры его запросов. Эта статья - первая из цикла про кастомные словари, рассказывающая про сбор базового вордлиста без особых усилий. В следующей статье я расскажу про создание более комплексного кастомного вордлиста, требующего больших затрат по времени.

https://habr.com/ru/companies/deiteriylab/articles/1029012/

#информационная_безопасность #пентест #фаззинг #багбаунти #безопасность_вебприложений #burp_suite #ffuf #recon #api_testing

Plum, for Proactive Land Uncovering & Monitoring, is an orchestration tool to learn, monitor, and document an exposure surface. It coordinates work between scanning agents, keeps historical results, and makes observations searchable over time.

This project, part of D4 which was initially co-funded by the European Union, is still young, but it already addresses a concrete need: helping CIRCL to keep a global view of Luxembourg’s IP space, especially in the context of NIS2-related activities. The goal is not only to scan, but to maintain actionable knowledge of the national perimeter, its visible exposures and allows vulnerability discovery in the context of incident response.

#plum #scanning #networkscanning #cybersecurity #recon #csirt

https://www.d4-project.org/2026/04/29/Plum-knowing-and-monitoring-your-perimeter.html

Plum, for Proactive Land Uncovering & Monitoring, is an orchestration tool to learn, monitor, and document an exposure surface. It coordinates work between scanning agents, keeps historical results, and makes observations searchable over time.

This project, part of D4 which was initially co-funded by the European Union, is still young, but it already addresses a concrete need: helping CIRCL to keep a global view of Luxembourg’s IP space, especially in the context of NIS2-related activities. The goal is not only to scan, but to maintain actionable knowledge of the national perimeter, its visible exposures and allows vulnerability discovery in the context of incident response.

#plum #scanning #networkscanning #cybersecurity #recon #csirt

https://www.d4-project.org/2026/04/29/Plum-knowing-and-monitoring-your-perimeter.html

Plum, for Proactive Land Uncovering & Monitoring, is an orchestration tool to learn, monitor, and document an exposure surface. It coordinates work between scanning agents, keeps historical results, and makes observations searchable over time.

This project, part of D4 which was initially co-funded by the European Union, is still young, but it already addresses a concrete need: helping CIRCL to keep a global view of Luxembourg’s IP space, especially in the context of NIS2-related activities. The goal is not only to scan, but to maintain actionable knowledge of the national perimeter, its visible exposures and allows vulnerability discovery in the context of incident response.

#plum #scanning #networkscanning #cybersecurity #recon #csirt

https://www.d4-project.org/2026/04/29/Plum-knowing-and-monitoring-your-perimeter.html

Plum, for Proactive Land Uncovering & Monitoring, is an orchestration tool to learn, monitor, and document an exposure surface. It coordinates work between scanning agents, keeps historical results, and makes observations searchable over time.

This project, part of D4 which was initially co-funded by the European Union, is still young, but it already addresses a concrete need: helping CIRCL to keep a global view of Luxembourg’s IP space, especially in the context of NIS2-related activities. The goal is not only to scan, but to maintain actionable knowledge of the national perimeter, its visible exposures and allows vulnerability discovery in the context of incident response.

#plum #scanning #networkscanning #cybersecurity #recon #csirt

https://www.d4-project.org/2026/04/29/Plum-knowing-and-monitoring-your-perimeter.html

Plum, for Proactive Land Uncovering & Monitoring, is an orchestration tool to learn, monitor, and document an exposure surface. It coordinates work between scanning agents, keeps historical results, and makes observations searchable over time.

This project, part of D4 which was initially co-funded by the European Union, is still young, but it already addresses a concrete need: helping CIRCL to keep a global view of Luxembourg’s IP space, especially in the context of NIS2-related activities. The goal is not only to scan, but to maintain actionable knowledge of the national perimeter, its visible exposures and allows vulnerability discovery in the context of incident response.

#plum #scanning #networkscanning #cybersecurity #recon #csirt

https://www.d4-project.org/2026/04/29/Plum-knowing-and-monitoring-your-perimeter.html