skills.rest
gongzeq
gongzeqCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

katana-crawl-web

Crawls authorized web targets to generate deduplicated candidate URLs for vulnerability scanning.

Updated May 7, 2026
Search Tags:#vulnerability#scanning#web#hypotheses#crawl#urls#katana
One-click install
npx skills add https://github.com/gongzeq/VAPT3 --skill katana-crawl-web
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: katana-crawl-web
Source: https://github.com/gongzeq/VAPT3/tree/main/secbot/skills/katana-crawl-web
Command: npx skills add https://github.com/gongzeq/VAPT3 --skill katana-crawl-web

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the discovery of web endpoints by running ProjectDiscovery Katana against an authorized HTTP/HTTPS target, returning a bounded set of candidate URLs for later vulnerability scanning.

Core Features & Use Cases

  • Deduplicates Katana's output and filters static or noisy endpoints to produce a focused list of targets.
  • Classifies query parameters and path segments to surface targeted vulnerability hypotheses for prioritization.
  • Outputs a structured candidate set that integrates with the orchestration pipeline for subsequent scanning tasks.

Quick Start

Crawl an authorized web target to generate a bounded list of candidate URLs for vulnerability testing.

Frequently Asked Questions about katana-crawl-web

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I crawl an authorized web target to generate candidate URLs for vulnerability scanning?▼

To crawl a web target for vulnerability scanning, you automate endpoint discovery by running Katana against an authorized HTTP/HTTPS target to return a bounded set of candidate URLs. The output is deduplicated and structured for downstream scanners.

What is the best way to surface hidden endpoints and parameter patterns during a security assessment?▼

Surfacing hidden endpoints and parameter patterns involves crawling the web target to discover URLs, classifying query parameters, and filtering static or noisy paths. This generates a focused list of targets with structured vulnerability hypotheses for prioritization.

Does this web crawling approach filter static or noisy endpoints before vulnerability testing?▼

Yes, this web crawling approach filters static or noisy endpoints before vulnerability testing. It deduplicates Katana's output and classifies path segments and query parameters to produce a focused, bounded list of candidate URLs for deeper scanning.

Can I integrate crawled URL results directly into an orchestration pipeline for downstream scanning?▼

You can integrate crawled URL results directly into an orchestration pipeline for downstream scanning. The process outputs a structured candidate set of deduplicated URLs and parameter classifications designed to feed subsequent vulnerability scanning tasks.

How do I classify query parameters to generate vulnerability hypotheses for prioritization?▼

To classify query parameters for vulnerability hypotheses, you crawl the target to extract URLs and categorize their parameters and path segments. This classification surfaces targeted vulnerability patterns worth deeper scanning and prioritization.

Related Skills

Explore More Software Engineering Skills→
chainreactorschainreactors
235

katana

Crawl web targets to identify parameterized URLs, form targets, and JavaScript endpoints.

Official
Intermediate
NickCrewNickCrew
29

owasp-top-10

Identify OWASP Top 10 security vulnerabilities in web applications.

Community
Advanced
softmgsoftmg

github-workflow-automation

Automate GitHub Actions workflow generation and CI/CD pipeline management.

Official
Advanced
zebbernzebbern
5

param-miner

Discover hidden HTTP parameters in web applications using Arjun and x8 workflows.

Community
Intermediate