🔍
AutomationPython

Web2 Recon

by shuvonsec

Web2 Recon is an Automation skill for Claude Code, published by shuvonsec in claude-bug-bounty.

4.2K stars767 forkson shuvonsec/claude-bug-bountyAdded 2026/08/16+1% in starsRepository updated 2026/08/10
View source on GitHubDownload repo ZIP
ai-securitybug-bountybugcrowdclaude-aiclaude-codectiethical-hackinghackeronehackinghacking-toolpenetration-testingreconvulnerability-scanner
Install in seconds
Install Web2 Recon
Copy Web2 Recon into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/shuvonsec/claude-bug-bounty/tree/main/skills/web2-recon ~/.claude/skills/web2-recon

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/shuvonsec/claude-bug-bounty.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
skills/web2-recon/SKILL.md in shuvonsec/claude-bug-bounty
Installs to
~/.claude/skills/web2-recon
Collection
One of 16 skills cataloged from this repository
Category
Automation — 1523 skills

What Web2 Recon does

Web2 Recon maps a target's attack surface by enumerating subdomains, discovering live hosts, crawling URLs, analyzing JavaScript, and fuzzing directories. Use it when starting recon on a web2 target or when asked about asset discovery, subdomain enumeration, or attack surface mapping.

Web2 Recon is cataloged under Automation on DirSkills. Web2 Recon comes from a repository tagged ai-security, bug-bounty, bugcrowd, claude-ai and claude-code.

Commands Web2 Recon provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

  • /web
  • /application
  • /config
  • /backup

Frequently asked about Web2 Recon

  • What else does shuvonsec publish alongside Web2 Recon?

    Web2 Recon is one of 16 skills that DirSkills catalogs from shuvonsec/claude-bug-bounty, the repository it ships in. Its siblings there include Argus, Bug Bounty and Bug Bounty. Each one is a separate skill with its own page in this directory, installs the same way Web2 Recon does, and is maintained by shuvonsec in that same repository. The rest of the collection is listed on the shuvonsec/claude-bug-bounty page.

  • How does Web2 Recon compare to other Automation skills?

    Web2 Recon ranks #314 by stars among the 1523 Automation skills in this catalog. The most-starred ones next to it are Autonomous Loops, Autonomous Agent Harness and Automation Audit Ops. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Web2 Recon against them. Open each page to compare what they document and how they install.

More from shuvonsec/claude-bug-bounty

Web2 Recon is one of 16 skills cataloged on DirSkills from shuvonsec/claude-bug-bounty.

See all 16 skills →
🔍
2w ago

Argus

Argus runs six automated scanners for web and LLM vulnerabilities: CORS misconfig, CRLF/host-header injection, NoSQL injection, JWT attacks, blind bug confirmation via OOB, and LLM red-teaming. Use it on JSON APIs, login endpoints, JWT auth, or any parameter that might reach the server.
Automation
4.2K767
🐞
2w ago

Bug Bounty

Bug Bounty guides a complete bug bounty workflow from reconnaissance and vulnerability hunting through validation and report writing, including LLM/AI security testing and A-to-B bug chaining. Use it for any bug bounty task, from starting a new target to writing the final submission.
Quality
4.2K767
🐞
2w ago

Bug Bounty

Bug Bounty provides a complete bug bounty workflow covering reconnaissance, vulnerability hunting, AI/LLM security testing, bug chaining, and report writing. Use it for starting new targets, hunting specific vuln classes, auditing source code, validating findings, or writing reports.
Quality
4.2K767
🎯
2w ago

Bug Bounty Methodology

Bug Bounty Methodology structures a hunting session around a five-phase workflow and a critical-thinking framework, so an agent can choose a goal, select techniques, and derive next actions. Use it at the start of a bug bounty session, when switching targets, or when unsure what to do next.
Quality
4.2K767
📝
2w ago

Bug Bounty Report Writing

Bug Bounty Report Writing provides templates, tone guidelines, CVSS scoring, and checklists for writing bug bounty reports for HackerOne, Bugcrowd, Intigriti, and Immunefi. Use it after validating a finding and before submitting.
Writing
4.2K767
🛡️
2w ago

CI/CD Security

CI/CD Security audits CI/CD pipelines for workflow injection, secret exfiltration, self-hosted runner poisoning, OIDC token theft, and supply chain attacks. Use it when a target has public repos or CI/CD infrastructure.
DevOps
4.2K767

More Automation skills

Web2 Recon is one of 1523 Automation skills cataloged on DirSkills, ranked #314 by stars among them.

Browse all Automation skills →
🔁
3w ago

Autonomous Loops

Autonomous Loops provides patterns and reference implementations for running Claude Code in autonomous loops, from simple sequential pipelines to RFC-driven multi-agent DAG systems. Retained for compatibility; use continuous-agent-loop for new guidance.
Automation
239.8K36.4K
🤖
3w ago

Autonomous Agent Harness

Autonomous Agent Harness turns Claude Code into a self-directing agent system with persistent memory, scheduled tasks, computer use, and task queuing. Use it when continuous autonomous operation, scheduled tasks, or self-directing agent loops are needed.
Automation
239.8K36.4K
🔍
3w ago

Automation Audit Ops

Automation Audit Ops audits live automations, jobs, hooks, and connectors to identify what is working, broken, redundant, or missing before any fixes are made.
Automation
239.8K36.4K