Automating on actual programs
So I've been doing a lot of recon automation with bash scripts using subfinder, httpx, nuclei, etc. and it definitely saved me time on the basic stuff. But I'm kind of hitting a wall figuring out what's actually worth automating vs what I'm just wasting time on.
Right now I have a decent pipeline going subdomain enum, port scanning, service detection, then running nuclei templates on everything. Catches a lot of the easy wins like misconfigured headers, leaked tokens/credentials. But I have seen people talking about automating more aggressively.
What is your experience at automation and what is actually worth automating?