---
id: 3572
title: "How to: Recon and Content Discovery"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/how-recon-and-content-discovery"
published_at: "2017-07-25T17:52:00Z"
tags: ["bug-bounty", "github", "methodology", "recon", "subdomain-enumeration"]
phying_url: "https://phying.com/item/3572"
lang: en
---

# How to: Recon and Content Discovery

## Summary

A recon how-to for bug hunters: recursively brute-force subdomains to map dev and corp environments, mine GitHub for internal hosts and keys, and expand the attack surface before hunting bugs.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2017-07-25T17:52:00Z
- **Original:** https://www.hackerone.com/blog/how-recon-and-content-discovery
- **Phying News:** https://phying.com/item/3572