Software Development

Attack Surface Mapping

Draw a testable attack surface from one authorized target URL or one application. Use when the user says 攻击面, 供给面, 画攻击面, map the surface, application recon, find the business host, JS inventory, or when the only visible page is login. Derive hosts, APIs, keys, and the object graph from what the app already exposes. Do not open with directory brute or payload spray. Use when the user runs /attack-surface-mapping.

Publisher / source

yaklang/hack-skills (found on skills.sh)

Upstream record

yaklang/hack-skills

Version

Version 2

Published

2026-11-02

Publication review

Approved for publication

Content fingerprint

b0acdfa1ec5c3af62be62b1e5df64669a4a9bd6c0b0e1baff31f509fb3e673be