Recon is the second phase of a scan. Building on the source analysis, an agent maps the live application's surface into a sitemap: every endpoint, method, parameter and the authentication each one needs. That sitemap later ties each finding to a specific URL.
The short version
Recon comes right after pre-recon and before the specialists start their analysis, and its job is simple: find out what the running app exposes to a visitor. Nothing more.
How it works in Cyberlop
Pre-recon has already read your code and built a baseline of frameworks, entry points and data flows. Recon takes that baseline and looks at the live app. An agent maps the surface into a sitemap that lists every endpoint it can find.
| Sitemap detail | What it holds |
|---|---|
| Endpoint | The path, grouped under its host. |
| Method | GET, POST and the other HTTP methods. |
| Parameters | The inputs each endpoint accepts. |
| Authentication | The login each endpoint needs. |
Why does this matter? A finding that points to a line of code is far more useful when you also know which URL reaches it. Your team can then reproduce the problem and check the fix without guessing. The sitemap supplies that link between a frontend or backend URL and the finding.
Recon leaves a record you can read. Once it has run, the Sitemap tab on the scan page lists the discovered endpoints, with a note for each one and a role chip on the right. Filter by URL or method, or export the list as CSV.
What to do next
- Open a scan and click the Sitemap tab to review what recon found.
- Check that every area of the app you care about appears. A missing area can mean the scan could not log in.
- Read how to view the discovered endpoints for the layout.
- To see how recon fits in, read the five-phase pipeline.
Related questions
- What are the five phases of a Cyberlop scan?
- How do I see which endpoints a scan discovered?
- How do I filter the sitemap by URL or method?
- How do I export a scan's sitemap?
- My scan found nothing behind the login. Why?
How to use the Cyberlop scan sitemap
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.