skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

deep-invade

Automate offensive security assessments by chaining SSRF probing, credential mining, and vulnerability discovery.

3|1|Updated Jul 2, 2026
Search Tags:#security#exploitation#wordpress#cve#pentest#ssrf#recon
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill deep-invade-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: deep-invade
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/recon/deep-invade
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill deep-invade-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, nmap, python3, masscan, subfinder, httpx, nuclei.

What problem does it solve?

This skill automates the transition from surface-level scanning to deep, manual-style offensive security assessment, identifying high-value exploit chains that automated scanners typically miss.

Core Features & Use Cases

  • Deep Reconnaissance: Performs advanced SSRF probing, error log credential mining, and plugin CVE matrix analysis.
  • Exploit Chain Discovery: Identifies pivot points across subdomains, staging environments, and internal API endpoints.
  • Use Case: When a target is flagged as high-value, use this skill to systematically uncover hidden staging environments, extract sensitive secrets from JavaScript bundles, and validate internal network exposure.

Quick Start

Run the deep-invade skill against the target domain example.com using your collaborator URL to confirm SSRF vulnerabilities.

Frequently Asked Questions about deep-invade

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate deep reconnaissance for high-value web targets?▼

Automate deep reconnaissance by chaining SSRF probing, credential mining, and CVE matrix analysis to uncover hidden staging environments and internal API endpoints, identifying high-value exploit chains that automated scanners miss.

What is the best way to find exploit chains in WordPress installations?▼

Finding exploit chains in WordPress installations requires applying plugin CVE matrix analysis alongside error log credential mining to systematically validate internal network exposure and identify pivot points across staging environments.

Do I need to install nuclei and masscan to run multi-stage offensive security probes?▼

Yes, you need nuclei and masscan installed, along with curl, nmap, python3, subfinder, and httpx, to execute the multi-phase security probes and comprehensive offensive assessments.

Can I use this approach to extract sensitive secrets from JavaScript bundles?▼

Yes, you can use this offensive security assessment approach to extract sensitive secrets from JavaScript bundles while systematically uncovering hidden staging environments and validating internal network exposure.

How does SSRF probing validate internal network exposure during penetration testing?▼

SSRF probing validates internal network exposure by using a collaborator URL to confirm server-side request forgery vulnerabilities, identifying internal API endpoints and pivot points across subdomains that expose high-value target infrastructure.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

phpinfo-to-rce

Analyze exposed phpinfo files to identify remote code execution vectors.

Community
Advanced
jinyimeng01jinyimeng01
54

exploit-agent

Validate suspected web vulnerabilities and generate structured exploit reports.

Community
Advanced
jd-opensourcejd-opensource
299

pentest-osint-recon

Gather public OSINT data to map external attack surfaces.

Official
Intermediate
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced