How to Audit a Site You Didn't Build | Recon