skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

enum-service-version

Identify technology stacks and software versions via HTTP response fingerprinting.

Updated Jul 30, 2026
Search Tags:#vulnerability#reconnaissance#enumeration#cve#pentest#fingerprinting
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-service-version
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: enum-service-version
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/enum-service-version
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-service-version

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the challenge of accurately identifying the technology stack and software versions of a target system, which is essential for mapping vulnerabilities without resorting to intrusive or destructive scanning.

Core Features & Use Cases

  • Multi-Layer Fingerprinting: Combines passive header analysis, HTML/JS artifact inspection, and safe active probing to identify servers, frameworks, and libraries.
  • Vulnerability Mapping: Automatically correlates detected versions with known CVE databases to prioritize security findings.
  • Use Case: During a security assessment, use this skill to identify that a target is running an outdated version of a specific web framework, allowing you to focus your testing on relevant, known security weaknesses.

Quick Start

Use the enum-service-version skill to perform a comprehensive technology fingerprinting scan on the target host defined in your current scope file.

Frequently Asked Questions about enum-service-version

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify web server software versions during a pentest without intrusive scanning?▼

Multi-layer fingerprinting identifies web server software versions by analyzing HTTP responses, JavaScript artifacts, and default configuration files. This non-destructive approach accurately inventories web servers, application frameworks, and client-side libraries.

Can I automatically map detected technology stack versions to known CVEs?▼

Yes, you can map detected technology stack versions to known CVEs automatically. The fingerprinting process correlates identified software versions with CVE databases to prioritize security findings within authorized assessment scopes.

What is non-destructive reconnaissance for technology fingerprinting?▼

Non-destructive reconnaissance for technology fingerprinting identifies technology stacks through passive header analysis and safe active probing. It accurately inventories target systems without resorting to intrusive or destructive scanning methods.

Does fingerprinting client-side JavaScript artifacts help identify application frameworks?▼

Yes, fingerprinting client-side JavaScript artifacts helps identify application frameworks by inspecting HTML and JS artifacts. This multi-layer approach combines passive header analysis with artifact inspection to accurately detect web frameworks and libraries.

When do I need to use safe active probing for vulnerability enumeration?▼

You need safe active probing for vulnerability enumeration when authorized security assessments require accurate inventory of web servers and frameworks. It combines with passive analysis to map versions to CVEs within defined engagement scopes.

Related Skills

Explore More Software Engineering Skills→
guaidao2guaidao2
81

httpx

Probe live HTTP and HTTPS hosts and collect response metadata.

Community
Intermediate
transilienceaitransilienceai
462

cve-testing

Coordinate CVE vulnerability testing across identified technology stacks and APIs.

Official
Basic
macaughmacaugh
5

Service Fingerprinting

Detect network services and versions on discovered hosts via active probing.

Community
Advanced
DevHive1DevHive1
18

security_scan

Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.

Community
Advanced