skills.rest
ramzxy
ramzxyCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ctf-recon

Automate CTF target reconnaissance with nmap, ffuf, and curl.

1|Updated Feb 6, 2026
Search Tags:#reconnaissance#ctf#enumeration#nmap#fingerprinting#web-discovery
One-click install
npx skills add https://github.com/ramzxy/CTF --skill ctf-recon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ctf-recon
Source: https://github.com/ramzxy/CTF/tree/main/.agents/skills/ctf-recon
Command: npx skills add https://github.com/ramzxy/CTF --skill ctf-recon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Target reconnaissance and enumeration for CTF challenges can be time-consuming and error-prone. This Skill provides ready-to-run commands and patterns to quickly identify open ports, services, web directories, and technology stacks.

Core Features & Use Cases

  • Network reconnaissance: port scanning, service fingerprinting, and banner grabbing.
  • Web reconnaissance: directory discovery, robots.txt, sitemap.xml, and technology fingerprinting.
  • API and GraphQL discovery: identify common endpoints, docs patterns, and versioning.
  • Use case: when facing a new CTF target, run this Skill to map the attack surface and plan next steps.

Quick Start

Follow the steps below to start reconnaissance on a target:

  1. Scan for ports and services: nmap -sV -T4 target
  2. Enumerate web content and tech: curl -sI http://target/; gobuster dir -u http://target/ -w wordlist.txt
  3. Check APIs and endpoints: for p in api api/v1 api/v2; do curl -s -o /dev/null -w "%{http_code}" "http://target/$p"; done

Frequently Asked Questions about ctf-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate CTF reconnaissance and enumeration for a new target?▼

This Skill automates CTF reconnaissance and enumeration by running nmap for port scanning, curl for header checks, and gobuster or ffuf for web directory discovery, revealing open ports, services, and technology stacks across multiple targets.

What is the best way to perform network reconnaissance and service fingerprinting during initial triage?▼

For network reconnaissance and service fingerprinting during initial triage, use nmap with -sV and -T4 flags to scan targets, reveal open ports, and identify running services to map the attack surface.

How do I discover hidden web directories and API endpoints on a CTF target?▼

Discover hidden web directories and API endpoints by using gobuster or ffuf with a wordlist for directory brute-forcing, and curl to check common API paths like api/v1 and api/v2 for valid HTTP status codes.

Do I need to install nmap and gobuster separately to use this CTF enumeration Skill?▼

Yes, you need nmap, gobuster or ffuf, and curl installed on your Linux environment, as this Skill relies on these standard tools to execute deterministic scanning, fingerprinting, and directory discovery tasks.

Can I use standard curl commands for technology fingerprinting on web targets?▼

Yes, use curl with the -sI flag to retrieve HTTP headers for technology fingerprinting, and also check robots.txt and sitemap.xml to identify the target's underlying technology stack.

Related Skills

Explore More Education & Research Skills→
yhy0yhy0
518

web-recon

Enumerate web attack surfaces with curl, dirsearch, gobuster, ffuf, nmap, and whatweb.

Community
Advanced
EntroVyxEntroVyx
3

port-service-discovery

Identify open network ports and service versions with nmap.

Community
Intermediate
naporin0624naporin0624
3

cve-search

Query the NVD CVE database for known vulnerabilities with keyword and severity filters.

Community
Intermediate
Steffen025Steffen025
186

Recon

Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.

Community
Advanced