ReconOne

Tweet about Bug Bounty, Recon, Recon Tips and Attack Surface Management.

[ReconOne @ReconOne_bk]

Jason Haddix literally shows how to master Recon in a comprehensive way

👇🔗🎥

#recon #recontips #bugbounty

[👑 OFJAAAH 👑 @ofjaaah]

🔥 New oneliners Clawdbot 🔥

#Clawdbot #recon #bugbounty

[bugcrowd @Bugcrowd]

Manual recon doesn’t scale, especially for hidden URLs.

This one-liner surfaces endpoints you didn’t know existed. 👇

[Rishi @rxerium]

🚨 2 new vulnerability scripts created for the n8n vulnerabilities disclosed today:

CVE-2026-1470:
https://t.co/yHEMjr3utd

CVE-2026-0863:
https://t.co/bub7Au7MYy

Happy hunting.

[ProjectDiscovery @pdiscoveryio]

Maximize your endpoint discovery by digging into JavaScript files. Using the -jc flag allows you to parse and crawl JS files to find hidden paths and APIs that standard crawls might miss

Use this command👇

katana -jc -u https://target(.)com

[ReconOne @ReconOne_bk]

How to start RECON in your #BugBounty Hunting

1. Subdomain Enumeration
2. Getting live hosts
3. Web Server Detection
4. Scan for file&dirs
5. Grab urls
6. What's in the JS file?
7. Github recon
8. Virtual Hosts

Open your terminal and start now 💪
#cybersecurity #recontips

[ReconOne @ReconOne_bk]

How to do a simple Recon Automation that gives you:

✅ Subdomains
✅ Web Server
✅ Screenshot of Web Applications

So... let's hack! 💪
#recon #recontips #bugbounty #automation #cybersecurity

[👑 OFJAAAH 👑 @ofjaaah]

Use NextJS? Recon ✨

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

Cred = https://t.co/4hiJXDNlmU

#infosec #cybersec #bugbountytips

[ProjectDiscovery @pdiscoveryio]

Scan smarter, not harder.

Here are 5 Naabu tweaks for faster, cleaner port discovery 👇

1️⃣ Tune -rate & -retries for speed vs false-positives
2️⃣ -exclude-cdn → only scan 80/443 for CDN IPs
3️⃣ Run -wn host discovery first
4️⃣ Bind -interface when routing matters
5️⃣ Use -resume for longer jobs

Install: https://t.co/DGdeUcFak9

#Naabu #ProjectDiscovery #Infosec #BugBounty #PortScanning

[ProjectDiscovery @pdiscoveryio]

🛠️ Stop running Subfinder, Nuclei, HTTPX “out of the box.”

In this walkthrough with @NahamSec, we:
• Build a VPS recon box
• Install & manage all PD tools w/ Go installer
• Chain Subfinder → AlterX → DNSX → Naboo → HTTPX → Katana
• Move from automation → methodology

Watch 👉 https://t.co/Si7mx8cjYm
#BugBounty #AppSec #Recon

[YesWeHack ⠵ @yeswehack]

💰 Want to earn your first bug bounty faster?

@amrelsagaei has put together a clear roadmap that shows what to learn, in what order, plus the best tools and practice resources - including @yeswehack #Dojo.

🔖 Bookmark it for later!

#BugBountyTips

https://t.co/AU0sCb1Fpc

[YesWeHack ⠵ @yeswehack]

Cross-site request forgery (CSRF) has survived the protections introduced to defeat it, so remains essential #BugBounty knowledge 📖 Our second ‘vulnerability vectors’ instalment details CSRF types and how to exploit them 👇

#BugBountyTips

https://t.co/z9x0OH0x2R

[ReconOne @ReconOne_bk]

Now that Katana has "custom fields" I can search for endpoints in JS files without using any other tools 👇

#recon #AttackSurface #bugbountytips #bugbounty #katana

[ReconOne @ReconOne_bk]

🧵 Here we are! Katana, a new web Crawler by @pdiscoveryio

Let's see how it works. A thread 👇🧵

#recontips #recon #projectdiscovery #hackwithautomation #bugbounty

[👑 OFJAAAH 👑 @ofjaaah]

My New tool s3 ✅

https://t.co/b0I7WolGtD

#bugbounty #bugbountytips #tools #ofjaaah

[Bug Bounty Village @BugBountyDEFCON]

Correct link for the talk is here: https://t.co/ywACpqVLUY Sorry for the mistake!

[Intigriti @intigriti]

We just dove into our shelf of archived bug bounty write-ups from the most notable hackers! 🤠

In this issue, we selected 5 compelling articles (that are still relevant today) to share with you, from which you can learn something new! 😎

🧵 👇

[ReconOne @ReconOne_bk]

Ok, the SecLists wordlists are really nice, but have you ever tried the ones from AssetNote? Many of them are updated to 2025!

Link 👇🔗

#recon #recontips #wordlist #enumeration #bugbounty #assetnote

[ReconOne @ReconOne_bk]

Link: https://t.co/TAYQ2WfIRZ

[ReconOne @ReconOne_bk]

Ok, the SecLists wordlists are really nice, but have you ever tried the ones from AssetNote? Many of them are updated to 2025!

Link 👇🔗

#recon #recontips #wordlist #enumeration #bugbounty #assetnote

[ReconOne @ReconOne_bk]

Link to the page: https://t.co/BEWDQDGdn0

[ReconOne @ReconOne_bk]

Did you know? This website allows you to identify the technologies behind web applications based on 404 errors

👇🔗

#BugBounty #enumeration #recon #recontips #pentest