enum-service-version

Identify technology stacks and software versions via HTTP response fingerprinting.

Updated Jul 30, 2026

Search Tags:#vulnerability #reconnaissance #enumeration #cve #pentest #fingerprinting

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-service-version

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: enum-service-version
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/enum-service-version
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-service-version

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the challenge of accurately identifying the technology stack and software versions of a target system, which is essential for mapping vulnerabilities without resorting to intrusive or destructive scanning.

Core Features & Use Cases

Multi-Layer Fingerprinting: Combines passive header analysis, HTML/JS artifact inspection, and safe active probing to identify servers, frameworks, and libraries.
Vulnerability Mapping: Automatically correlates detected versions with known CVE databases to prioritize security findings.
Use Case: During a security assessment, use this skill to identify that a target is running an outdated version of a specific web framework, allowing you to focus your testing on relevant, known security weaknesses.

Quick Start

Use the enum-service-version skill to perform a comprehensive technology fingerprinting scan on the target host defined in your current scope file.

Frequently Asked Questions about enum-service-version

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify web server software versions during a pentest without intrusive scanning?▼

Multi-layer fingerprinting identifies web server software versions by analyzing HTTP responses, JavaScript artifacts, and default configuration files. This non-destructive approach accurately inventories web servers, application frameworks, and client-side libraries.

Can I automatically map detected technology stack versions to known CVEs?▼

Yes, you can map detected technology stack versions to known CVEs automatically. The fingerprinting process correlates identified software versions with CVE databases to prioritize security findings within authorized assessment scopes.

What is non-destructive reconnaissance for technology fingerprinting?▼

Non-destructive reconnaissance for technology fingerprinting identifies technology stacks through passive header analysis and safe active probing. It accurately inventories target systems without resorting to intrusive or destructive scanning methods.

Does fingerprinting client-side JavaScript artifacts help identify application frameworks?▼

Yes, fingerprinting client-side JavaScript artifacts helps identify application frameworks by inspecting HTML and JS artifacts. This multi-layer approach combines passive header analysis with artifact inspection to accurately detect web frameworks and libraries.

When do I need to use safe active probing for vulnerability enumeration?▼

You need safe active probing for vulnerability enumeration when authorized security assessments require accurate inventory of web servers and frameworks. It combines with passive analysis to map versions to CVEs within defined engagement scopes.