deep

Discover chained vulnerabilities across applications and infrastructure during penetration tests.

846|152|Updated Mar 13, 2026
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill deep-xalgord
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: deep
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/scan_modes/deep
Command: npx skills add https://github.com/xalgord/xalgorix --skill deep-xalgord

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep mode addresses the gap left by surface-level scans and automated tools by performing exhaustive, end-to-end security assessments that find multi-step, high-impact attack paths and subtle business logic flaws.

Core Features & Use Cases

  • Exhaustive Reconnaissance: Combines whitebox and blackbox techniques to map code paths, subdomains, ports, APIs, and external integrations.
  • Business Logic Deep Dive: Models user flows, trust boundaries, and state transitions to uncover logic flaws and multi-step abuses.
  • Comprehensive Attack Surface Testing & Chaining: Tests all input vectors, advanced techniques (SSRF, request smuggling, prototype pollution), and chains findings to maximize impact.
  • Persistent Testing & Reporting: Iterative bypass attempts, multi-agent parallelization for focused exploits, and full PoC-driven reports with remediation guidance.
  • Use Case: Run a wildcard scan against an organization's domain to enumerate subdomains, identify exposed services, and chain an information disclosure into an access control bypass to demonstrate end-to-end impact.

Quick Start

Perform a deep scan of https://target.example and produce a prioritized report with PoCs and remediation recommendations.

Frequently Asked Questions about deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find chained vulnerabilities during a penetration test?

Deep security assessments uncover chained vulnerabilities by performing exhaustive reconnaissance across subdomains and ports, analyzing business logic and state transitions, and combining multiple lower-severity findings into high-impact attack paths.

What is the best way to test for business logic flaws in web applications?

Testing for business logic flaws requires modeling user flows, trust boundaries, and state transitions to uncover multi-step abuses that automated scanners miss, ensuring you identify subtle logical bypasses and access control failures.

Can I run a wildcard subdomain enumeration and port scan for attack surface mapping?

Yes, you can run a wildcard scan against a target domain to enumerate subdomains, identify exposed services through port scanning, and comprehensively map the external attack surface before targeted exploitation attempts.

How do I generate PoC reports with remediation guidance after security testing?

Generate PoC reports with remediation guidance by documenting full reproduction steps for discovered vulnerabilities, prioritizing findings by chained impact, and providing actionable recommendations to remediate the identified attack paths.

Does vulnerability chaining work for both whitebox and blackbox testing scenarios?

Vulnerability chaining works for both whitebox and blackbox scenarios by combining internal code path analysis with external fingerprinting and fuzzing to test all input vectors and maximize exploit impact.

Why does my automated vulnerability scanner miss complex multi-step attack paths?

Automated vulnerability scanners miss complex multi-step attack paths because they lack the ability to model business logic, understand trust boundaries, and perform iterative bypass attempts needed for deep vulnerability chaining.