> For the complete documentation index, see [llms.txt](https://gowthams.gitbook.io/bughunter-handbook/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowthams.gitbook.io/bughunter-handbook/recon-one-liners.md).

# Recon One Liners

* [Just Finish a Multiple FFUF and playing with RUSHrush -i /opt/recon/xxx/hostsAlive -j 10 'ffuf -o $(echo {} | unfurl domains) -w /opt/SecLists/Discovery/Web-Content/raft-large-files.txt -u "{}/FUZZ" -sf -ignore-body -mc 200 -t 300' #bugbountyt](https://twitter.com/zeroc00I/status/1303813767210377217?s=20)[ips](https://twitter.com/hashtag/bugbountytips?src=hashtag_click)
* [subfinder -nW -silent -t 25 -d $DOMAIN | shuffledns -silent -d $DOMAIN -r $RESOLVER | wildcheck -t 100 | awk '{print $3}' | dnsprobe -t 350 -f domain Some crazy oneliners possible for subdomain discovery](https://twitter.com/sprocket_ed/status/1248050484792852480?s=20)

{% embed url="<https://twitter.com/harshbothra_/status/1270404745451106310?s=20>" %}