Overview

• Keep track of site-hierarchy, tools output, interesting notes, etc.
• We can use mind-maps to visualize large scope by bug bounty hunting targets and allows them to break up methodology for in-depth bug hunting as well.

Mission-wide recon is the art of discovering as many assets related to a target as possible. (Make sure the scope permits testing these sites)

It could be recon is not your thing. That’s all right! :-)

Several hunters have open-sourced their automation at this point and you can choose one that fits you and use it without worrying too much. I usually classify recon frameworks in rough tiers.