skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

enum-web-content

Automate web content enumeration and directory discovery across authorized in-scope targets.

Updated Jul 30, 2026
Search Tags:#reconnaissance#discovery#web-security#enumeration#fuzzing#pentest
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-web-content
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: enum-web-content
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/enum-web-content
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-web-content

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates the discovery of web-accessible content, sensitive files, and virtual hosts while strictly adhering to security policies and authorization gates.

Core Features & Use Cases

  • Passive & Active Discovery: Combines analysis of robots.txt and sitemaps with controlled, rate-limited active probing.
  • Sensitive File Detection: Identifies exposed configuration files, backup artifacts, and environment variables without storing sensitive content.
  • Use Case: During an authorized engagement, use this skill to map the directory structure of a target web application and identify misconfigured backup files or exposed administrative interfaces.

Quick Start

Use the enum-web-content skill to perform a discovery scan on the target domain provided in the current scope file.

Frequently Asked Questions about enum-web-content

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web content enumeration and directory discovery during a pentest?▼

Web content enumeration automates directory probing and virtual host identification across authorized targets. It combines passive analysis of robots.txt and sitemaps with controlled, rate-limited active probing to map web application structures securely.

Can I use this for sensitive file detection like exposed configuration files and backups?▼

Sensitive file detection identifies exposed configuration files, backup artifacts, and environment variables during discovery scans. It securely flags these misconfigured assets without storing the sensitive content found within them.

Does web discovery and fuzzing require strict authorization and rate-limiting?▼

Web discovery requires strict adherence to rate-limiting, scope-bound boundaries, and authorization-gated execution policies. This ensures active probing and directory enumeration remain controlled and compliant during security assessments.

What is the best way to map a target web application directory structure in an authorized engagement?▼

The best way to map directory structures is applying automated discovery scans to target domains provided in a current scope file. This approach identifies misconfigured files and exposed administrative interfaces efficiently.

What are the limitations of active probing for sensitive file detection?▼

Active probing limitations include strict enforcement of rate-limiting and scope-bound boundaries to prevent unauthorized access. It operates under authorization-gated execution policies, restricting scans to explicitly defined in-scope targets only.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

recon-osint

Aggregate public data from search engines, DNS, and repositories for passive reconnaissance.

Community
Advanced
AgentSecOpsAgentSecOps
183

sast-bandit

Analyze Python code for security vulnerabilities and generate JSON reports.

Official
Advanced
uphiagouphiago
1.1k

web-enumeration

Scan web servers for exposed sensitive files and hidden endpoints.

Community
Advanced
wgpsecwgpsec
1.6k

ffuf-fuzz

Automate web fuzzing for directories, parameters, and virtual hosts.

Official
Intermediate