Crawl web targets to identify parameterized URLs, form targets, and JavaScript endpoints.
npx skills add https://github.com/chainreactors/aiscan --skill katana-chainreactors
Please help me install this Agent Skill. Skill: katana Source: https://github.com/chainreactors/aiscan/tree/main/skills/katana Command: npx skills add https://github.com/chainreactors/aiscan --skill katana-chainreactors
This Skill solves the challenge of incomplete attack surface visibility by performing deep web crawling that captures query parameters, form targets, and JavaScript-discovered endpoints.
Use the katana skill to crawl the target website at https://example.com with a depth of 3 and extract all JavaScript-discovered endpoints.
High-intent search queries and answers about installing and using this skill.
Deep web crawling extracts parameterized URLs, form targets, and JavaScript-discovered endpoints to map hidden application routes. It parses JS files deeply to uncover query strings and API structures that standard crawlers often miss during security assessments.
Parameter-aware crawling identifies URLs with query strings and form actions to map an application's attack surface. You need it when standard crawlers fail to capture hidden routes and query structures required for comprehensive vulnerability analysis.
To extract JavaScript endpoints, configure the crawler to deeply parse JS files across the target web application. This uncovers hidden API endpoints and application routes, outputting structured URL data for downstream fuzzing pipelines.
Yes, recursive crawling requires the katana binary to execute. It uses this binary to perform deep web crawling and output structured URL data, mapping complex application discovery targets without requiring additional dependencies.
Yes, the crawler outputs structured URL data containing query parameters and form targets. You can directly feed this comprehensive list of parameterized URLs into your fuzzing or vulnerability scanning pipeline for downstream analysis.
Deep web crawling maps hidden routes by recursively crawling complex web targets and extracting JavaScript-based endpoints. This approach captures query structures and form targets, providing comprehensive attack surface visibility for security assessments.
shekerkammaAutomate web scraping and crawling operations through the Firecrawl API.
pdparchitectExecute reconnaissance, vulnerability analysis, and reporting for web applications and APIs.
cxnaivePerform authorized web application penetration testing with reconnaissance, vulnerability analysis, and proof-based exploitation.
EntroVyxIdentify exposed API keys and security misconfigurations on solar installer websites.
