Introducing Agents.·Read the releaseRead

Get a demo Start building

Docs Glossary Changelog Blog

Blog

Notes from the team.

Offensive-security workflows, discovery at scale, and what we learn running them in production.

Get a demo Explore the platform

Tagged recon

6 posts match this tag.

Schematic illustration of packaged artifacts fanning across parallel scan lanes

What It Takes to Scan Half a Million Packages a Day

Every package npm and PyPI publish is an archive somebody has to open. We download them all, screen them in parallel, unpack the ones that need a closer look, and give an agent only what the scanners cannot settle.

Abstract schematic illustration of developer code, AI hallucinations, and public package registry verification

Slopsquatting: When AI Hallucinates a Package Attackers Register

AI coding assistants hallucinate non-existent package dependencies that adversaries register to execute code on developer workstations and build pipelines. Here is how enterprise security teams catch hallucinated packages before attackers claim them.

A single root node branches into an ever-expanding tree of discovered subdomains, where each found node itself sprouts new branches — showing recursive permutation as compounding growth

Subdomain Brute Force Discovery Workflow - Part 2

Learn how to generate subdomain permutations from an initial list of subdomains and brute force them to discover more subdomains.

A vast tree whose visible canopy is small but whose root system sprawls enormously underground, each root tip representing a forgotten, vulnerable subdomain

Full Subdomain Discovery Workflow - Part 1

Subdomain discovery explained: the core OSINT and DNS brute-force techniques, and how to automate them in a Trickest workflow.

A complex recon pipeline assembles itself from pre-built tool blocks — no wiring, no scaffolding, no coder required

Serverless, No-Code Security Automation Workflows

Hakluke builds serverless, no-code recon and scanning automation with Trickest in under 30 minutes, no coding or infrastructure required.

A pipeline of seeds fed in one end emerges as a sorted harvest of vulnerabilities at the other, driven by an automated assembly line that runs without human hands

Recon and Vulnerability Scanner with Trickest

In just a few steps, create your own recon and vulnerability scanner via Trickest and GitHub and find vulnerabilities and assets easier than ever.

Get a personalized demo

See Trickest in Action

A 30-minute walkthrough. We map the platform to your stack and answer pricing and deployment questions for your environment.

Book a demo Explore the platform