> ## Documentation Index
> Fetch the complete documentation index at: https://trickest.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Workflows

> Explore a collection of powerful and efficient workflows in the Attack Surface Management category to enhance your productivity and security.

export const WorkflowCard = ({cardTitle, description, iframeUrl, href, category, complexity, publisher}) => <a href={href} style={{
  textDecoration: 'none'
}}>
    <div style={{
  background: 'linear-gradient(145deg, rgba(255, 255, 255, 0.03) 0%, rgba(255, 255, 255, 0.02) 100%)',
  borderRadius: '16px',
  overflow: 'hidden',
  transition: 'transform 0.4s cubic-bezier(0.215,0.61,0.355,1), box-shadow 0.3s ease',
  height: '40rem',
  display: 'flex',
  marginBottom: '16px',
  flexDirection: 'column',
  border: '1px solid rgba(255, 255, 255, 0.1)',
  boxShadow: '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)',
  backdropFilter: 'blur(8px)',
  perspective: '1000px'
}} onMouseOver={e => {
  e.currentTarget.style.boxShadow = '0 8px 32px -2px rgba(0, 0, 0, 0.4)';
  e.currentTarget.style.transform = 'translateY(-4px) scale(1.02)';
}} onMouseOut={e => {
  e.currentTarget.style.boxShadow = '0px 8px 32px -2px rgba(0, 0, 0, 0.25), 0px 1px 2px 0px rgba(255, 255, 255, 0.07)';
  e.currentTarget.style.transform = 'translateY(0) scale(1)';
}}>
      <div style={{
  width: '100%',
  height: '300px',
  borderBottom: '1px solid rgba(255, 255, 255, 0.1)',
  position: 'relative'
}}>
        <div style={{
  position: 'absolute',
  top: 0,
  left: 0,
  right: 0,
  bottom: 0,
  background: 'linear-gradient(45deg, rgba(0, 163, 255, 0.1) 0%, rgba(0, 101, 255, 0.05) 100%)'
}} />
        <iframe src={iframeUrl} style={{
  width: '100%',
  height: '100%',
  border: 'none',
  position: 'relative',
  zIndex: 1,
  background: 'transparent'
}} scrolling="no" />
      </div>

      <div style={{
  padding: '1.5rem',
  display: 'flex',
  flexDirection: 'column',
  height: 'calc(100% - 300px)',
  gap: '12px'
}}>
        <div style={{
  height: '4.5rem',
  display: 'flex',
  alignItems: 'flex-start'
}}>
          <h2 style={{
  color: '#ffffff',
  fontSize: '1.4rem',
  margin: 0,
  fontWeight: '600',
  lineHeight: '1.3',
  overflow: 'hidden',
  textOverflow: 'ellipsis',
  display: '-webkit-box',
  WebkitLineClamp: 2,
  WebkitBoxOrient: 'vertical'
}}>
            {cardTitle}
          </h2>
        </div>

        <div style={{
  display: 'flex',
  alignItems: 'center',
  gap: '8px',
  marginBottom: '8px'
}}>
          <div style={{
  display: 'flex',
  alignItems: 'center',
  gap: '8px'
}}>
            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="rgba(163, 179, 188, 0.8)" strokeWidth="2">
              <rect width="16" height="16" x="4" y="4" rx="2" />
              <rect width="6" height="6" x="9" y="9" rx="1" />
              <path d="M15 2v2" /><path d="M15 20v2" />
              <path d="M2 15h2" /><path d="M2 9h2" />
              <path d="M20 15h2" /><path d="M20 9h2" />
              <path d="M9 2v2" /><path d="M9 20v2" />
            </svg>
            <span style={{
  color: 'rgba(163, 179, 188, 0.8)',
  fontSize: '0.9rem'
}}>Complexity</span>
            <div style={{
  display: 'flex',
  gap: '4px',
  marginLeft: '8px'
}}>
              {Array.from({
  length: 5
}, (_, i) => <div key={i} style={{
  width: '20px',
  height: '4px',
  backgroundColor: i < complexity ? '#3a86ff' : 'rgba(255, 255, 255, 0.1)',
  borderRadius: '2px'
}} />)}
            </div>
          </div>
        </div>

        <p style={{
  color: 'rgba(163, 179, 188, 0.8)',
  fontSize: '1rem',
  margin: 0,
  lineHeight: '1.5',
  flex: '1 1 auto',
  overflowY: 'auto',
  paddingRight: '8px'
}}>
          {description}
        </p>

        <div style={{
  display: 'flex',
  justifyContent: 'flex-end',
  alignItems: 'center',
  gap: '8px',
  marginTop: '12px'
}}>
          <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="rgba(163, 179, 188, 0.8)" strokeWidth="2">
            <path d="M20 21v-2a4 4 0 0 0-4-4H8a4 4 0 0 0-4 4v2" />
            <circle cx="12" cy="7" r="4" />
          </svg>
          <span style={{
  color: 'rgba(163, 179, 188, 0.8)',
  fontSize: '0.75rem'
}}>
            {publisher}
          </span>
        </div>
      </div>
    </div>
  </a>;

<CardGroup cols={2}>
  <WorkflowCard cardTitle="Levels-deep Subdomain Enumeration" description="Discover overlooked assets by enumerating subdomains, sub-subdomains, sub-sub-subdomains, ..." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f8651ab3-b3fa-4383-9b60-0c7ec1ae3ba9.json" href="/docs/library/attack-surface-management/workflows/levels-deep-subdomain-enumeration" id="f8651ab3-b3fa-4383-9b60-0c7ec1ae3ba9" category="Attack Surface Management" complexity={3} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Inventory 3.0" description="Completely Transparent Attack Surface Management designed to monitor companies for new assets and streamline the asset management through easily readable CSV files." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/7344adbc-de38-43fc-8108-c9529bd4d75d.json" href="/docs/library/attack-surface-management/workflows/inventory-3-0" id="7344adbc-de38-43fc-8108-c9529bd4d75d" category="Attack Surface Management" complexity={4} publisher="zaric" />

  <WorkflowCard cardTitle="Mass Web Server Discovery" description="Efficiently discover live web servers across a large list of hosts" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/c7ddee97-f49d-4b5e-af7d-be8f54bce960.json" href="/docs/library/attack-surface-management/workflows/mass-web-server-discovery" id="c7ddee97-f49d-4b5e-af7d-be8f54bce960" category="Attack Surface Management" complexity={2} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="ASN Based Network Scan" description="Expand ASNs to CIDR ranges and do port scan the top 1000 ports." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/0df219c5-379f-490c-b68d-2e13df3f8d56.json" href="/docs/library/attack-surface-management/workflows/asn-based-network-scan" id="0df219c5-379f-490c-b68d-2e13df3f8d56" category="Attack Surface Management" complexity={2} publisher="zaric" />

  <WorkflowCard cardTitle="Resolve and port scan a list of hosts" description="Resolving host names first can lead to a faster port scan and give you more visibility into your target's IP space" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/d65b2c03-d143-428b-9010-32211f65f9d6.json" href="/docs/library/attack-surface-management/workflows/resolve-and-port-scan-a-list-of-hosts" id="d65b2c03-d143-428b-9010-32211f65f9d6" category="Attack Surface Management" complexity={3} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Find a server's origin IP address" description="Search for the origin IP address of a web server by scanning a list of IP addresses as seen on https://trickest.com/blog/cloudflare-bypass-discover-ip-addresses-aws and https://trickest.com/blog/hundreds-of-ssrfs" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/7d08b530-80f9-4336-b7a5-340afaec7415.json" href="/docs/library/attack-surface-management/workflows/find-a-server-origin-ip-address" id="7d08b530-80f9-4336-b7a5-340afaec7415" category="Attack Surface Management" complexity={3} publisher="carlospolop" />

  <WorkflowCard cardTitle="Enumerate AWS web servers" description="Scan AWS's IP space for http ports as seen on https://trickest.com/blog/cloudflare-bypass-discover-ip-addresses-aws and https://trickest.com/blog/hundreds-of-ssrfs" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/dda6822a-0e26-43c1-ab3e-3795f403d5db.json" href="/docs/library/attack-surface-management/workflows/enumerate-aws-web-servers" id="dda6822a-0e26-43c1-ab3e-3795f403d5db" category="Attack Surface Management" complexity={2} publisher="carlospolop" />

  <WorkflowCard cardTitle="Subdomain Enumeration - @trick3st_bot Edition" description="The workflow that powers the subdomain enumeration feature of the best security automation Twitter bot https://twitter.com/trick3st_bot" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/5230db87-44df-472c-956f-39fa8b62756c.json" href="/docs/library/attack-surface-management/workflows/subdomain-enumeration-trick3stbot-edition" id="5230db87-44df-472c-956f-39fa8b62756c" category="Attack Surface Management" complexity={3} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Asset Discovery & Vulnerability Scanning" description="Discover hostnames comprehensively through passive and active techniques, enumerate web servers, scan for open ports, and discover vulnerabilities, disclosed secrets, exposed panels, and more. The workflow uses previous results as seeds; run it regularly and it may discover new assets every time. To start, set your domain name, wordlist limit, vulnerability filter, Trickest token, and workflow ID" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6d5a8540-9d77-4334-9bb8-1422b5a047f0.json" href="/docs/library/attack-surface-management/workflows/asset-discovery-and-vulnerability-scanning" id="6d5a8540-9d77-4334-9bb8-1422b5a047f0" category="Attack Surface Management" complexity={4} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Full Subdomain Enumeration" description="Enumerate subdomains for a list of domains using multiple effective techniques. Follow along the workflow creation process on https://trickest.com/blog/full-subdomain-brute-force-discovery-using-workflow/" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6a52bc2b-9073-454c-b2d4-0aa1afea3e19.json" href="/docs/library/attack-surface-management/workflows/full-subdomain-enumeration" id="6a52bc2b-9073-454c-b2d4-0aa1afea3e19" category="Attack Surface Management" complexity={3} publisher="carlospolop" />

  <WorkflowCard cardTitle="Screenshots and Analysis" description="Take screenshots of a list of web servers (in parallel) and analyze the screenshots using eyeballer" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/882b27c5-6012-47c1-8c93-ec6e2c489b67.json" href="/docs/library/attack-surface-management/workflows/screenshots-and-analysis" id="882b27c5-6012-47c1-8c93-ec6e2c489b67" category="Attack Surface Management" complexity={2} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Simple Visual Recon" description="Find subdomains, check for available web servers and screenshot them." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/2060617a-5492-42bd-bbe3-b9fa29028897.json" href="/docs/library/attack-surface-management/workflows/simple-visual-recon" id="2060617a-5492-42bd-bbe3-b9fa29028897" category="Attack Surface Management" complexity={2} publisher="trickest" />

  <WorkflowCard cardTitle="Inventory 2.0 - Web Servers" description="Find live web servers for a list of subdomains. Check out the web servers of public bug bounty programs on https://github.com/trickest/inventory" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/aa22a49d-d9a5-45a1-8be2-c75359593248.json" href="/docs/library/attack-surface-management/workflows/inventory-2-0-web-servers" id="aa22a49d-d9a5-45a1-8be2-c75359593248" category="Attack Surface Management" complexity={2} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Inventory 2.0 - Cloud Assets" description="Enumerate cloud assets for a list of companies/hosts, across AWS, GCP, Azure, DigitalOcean, Linode, and other cloud providers. Check out the cloud assets of public bug bounty programs on https://github.com/trickest/inventory" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/304aae7e-a664-4de5-8e05-917f747a1d6b.json" href="/docs/library/attack-surface-management/workflows/inventory-2-0-cloud-assets" id="304aae7e-a664-4de5-8e05-917f747a1d6b" category="Attack Surface Management" complexity={3} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Inventory 2.0 - Hostnames" description="Enumerate hostnames/subdomains for a list of domains using multiple passive and active techniques. Check out the hostnames of public bug bounty programs on https://github.com/trickest/inventory" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/6b22f1b5-477b-4632-8c96-f122136d1073.json" href="/docs/library/attack-surface-management/workflows/inventory-2-0-hostnames" id="6b22f1b5-477b-4632-8c96-f122136d1073" category="Attack Surface Management" complexity={3} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="34 M Wordlist Subdomain Brute-Force" description="Brute-Force subdomain with a huge wordlist" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/173a06ea-c247-47e6-83c4-89e86179d267.json" href="/docs/library/attack-surface-management/workflows/34-m-wordlist-subdomain-brute-force" id="173a06ea-c247-47e6-83c4-89e86179d267" category="Attack Surface Management" complexity={1} publisher="zaric" />

  <WorkflowCard cardTitle="Hostnames S3 Bucket Finder" description="Find s3 buckets by permutations of already known hostnames." iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/943a8e63-279b-4107-8a4e-1e20364c3042.json" href="/docs/library/attack-surface-management/workflows/hostnames-s3-bucket-finder" id="943a8e63-279b-4107-8a4e-1e20364c3042" category="Attack Surface Management" complexity={2} publisher="zaric" />

  <WorkflowCard cardTitle="Enumerate cloud resources" description="Find cloud resources across different providers based on a target's name and hostnames" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f43eddb3-c1ce-4d90-ab0e-98f26b1c39b4.json" href="/docs/library/attack-surface-management/workflows/enumerate-cloud-resources" id="f43eddb3-c1ce-4d90-ab0e-98f26b1c39b4" category="Attack Surface Management" complexity={3} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="IP Ranges Port Scan" description="Port-scan a list of IP ranges" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/19e5c745-fef4-46a1-9ba3-63f39a6a8329.json" href="/docs/library/attack-surface-management/workflows/ip-ranges-port-scan" id="19e5c745-fef4-46a1-9ba3-63f39a6a8329" category="Attack Surface Management" complexity={1} publisher="trickest-mhmdiaa" />

  <WorkflowCard cardTitle="Subdomain Port Scan" description="Resolve and port-scan a list of subdomains" iframeUrl="https://editor.trickest.io/preview?workflow_url=https://trickest-public-workflow.s3.eu-central-1.amazonaws.com/f2afe055-9cf2-4a7a-afd7-64c40030c7a9.json" href="/docs/library/attack-surface-management/workflows/subdomain-port-scan" id="f2afe055-9cf2-4a7a-afd7-64c40030c7a9" category="Attack Surface Management" complexity={2} publisher="trickest-mhmdiaa" />
</CardGroup>