Identify CMS, frameworks, and server software of live web hosts.
npx skills add https://github.com/uphiago/recon-skills --skill cms-detection
Please help me install this Agent Skill. Skill: cms-detection Source: https://github.com/uphiago/recon-skills/tree/main/recon/cms-detection Command: npx skills add https://github.com/uphiago/recon-skills --skill cms-detection
This Skill eliminates the guesswork of identifying what technology stack a live web host uses, preventing wasted time running irrelevant security tests and ensuring you target the right vulnerabilities for each CMS or framework.
Use the cms-detection skill to identify the CMS, framework, and server technology stack for all hosts in your alive subdomains list, along with their running versions where available.
High-intent search queries and answers about installing and using this skill.
Identify the CMS and technology stack of live hosts by applying technology fingerprinting with tools like httpx and whatweb. This process categorizes targets and extracts version information to support penetration testing reconnaissance.
The best way to fingerprint large lists of subdomains is bulk technology fingerprinting. This categorizes alive hosts by their CMS, web framework, and server software so you can prioritize specific vulnerability assessments instead of running generic scans.
Yes, version detection identifies exact running versions of platforms like WordPress, Drupal, Joomla, and Magento. Version-specific detection matches identified software versions against known CVEs using searchsploit to guide vulnerability assessment.
Technology fingerprinting prioritizes vulnerability assessment by sorting hosts by their technology stack. This allows you to target platform-specific tests for WordPress sites rather than wasting time running irrelevant security tests across all targets.
Yes, you need an alive subdomains list to start technology fingerprinting. Providing a list of live web hosts allows the fingerprinting tools to identify the server software, web framework, and CMS for each target efficiently.
You should not use bulk CMS detection when targets are not live web hosts or lack HTTP services. The fingerprinting process requires responsive alive hosts to accurately identify the content management system and server technology stack.
chainreactorsProbe HTTP services and fingerprint web technologies on target hosts.
naporin0624Query the NVD CVE database for known vulnerabilities with keyword and severity filters.
crazyMarkyIdentify web technologies, frameworks, CMS, and WAF/CDN solutions using whatweb, wafw00f, nuclei, and httpx.
davpatel605-beepPerform authorized web application penetration testing with structured vulnerability classification and reporting.
