red-team-tools

原文涵盖的主题

• Red Team Tools and Methodology
• Purpose
• Inputs/Prerequisites
• Outputs/Deliverables
• Core Workflow
• 1. Project Tracking and Acquisitions
• 2. Subdomain Enumeration
• 3. Live Host Discovery

Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces. Target scope definition (domains, IP ranges, applications) Linux-based attack machine (Kali, Ubuntu) Bug bounty program rules and scope Tool dependencies installed (Go, Python, Ruby) API keys for various services (Shodan, Censys, etc.) Comprehensive subdomain enumeration Live host discovery and technology fingerprinting Identified vulnerabilities and attack vectors Automated recon pipeline outputs Documented findings for reporting Set up reconnaissance tracking: Comprehensive subdomain discovery: Identify responding hosts: Identify technologies for targeted attacks: Find hidden endpoints and files: Heat Map Priority Areas: 1. File Uploads - Test for injection, XXE, SSRF, shell upload 2. Content Types - Filter Burp for multipart forms 3. APIs - Look for hidden methods, lack of auth 4. Profile Sections - Stored XSS, custom fields 5. Integrations - SSRF through third parties 6. Error Pages - Exotic injection points Analysis Questions: How does the app

这里只展示节选，请以完整原文和当前要求为准。