Visual recon with Aquatone and WebScreenshot
A VPS-based workflow chaining Aquatone subdomain discovery, WebScreenshot capture and express-photo-gallery into a browsable wall of screenshots for triaging a large attack surface.
Aquatone
Aquatone for subdomain discovery and port sweeping. This is what recon at scale looked like in 2018.