skills.rest
wgpsec
wgpsecOFFICIAL
Explore all skills by this author →
Website𝕏@wgpsecGitHub

local-resources

Locate local pentest wordlists and resolve absolute paths for ffuf and spray.

1.6k|234|Updated Dec 7, 2019
Search Tags:#ffuf#poc#payload#pentest#dictionary#wordlist#spray
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill local-resources
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: local-resources
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/general/local-resources
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill local-resources

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly finds and standardizes access to local pentest resources so operators stop guessing file locations and avoid using incorrect or missing wordlists for scans and payload tests.

Core Features & Use Cases

  • Centralized Resource Mapping: Describes the expected directory layout under /pentest/AboutSecurity and where to find dictionaries, payloads, and POC files.
  • Decision Guidance: Provides heuristics for choosing the right wordlist for web directory fuzzing, PHP discovery, CTF scenarios, and password brute force.
  • Tool Integration Examples: Explains how to resolve absolute paths and pass them correctly to tools such as ffuf and spray to avoid false assumptions and wasted time.
  • Use Case: For a PHP site directory brute force, the skill directs the user to Web/Directory/php/Fuzz_php.txt and to provide the resolved absolute path to ffuf or spray.

Quick Start

Locate the appropriate wordlist under /pentest/AboutSecurity/Dic/, resolve its absolute path, and pass that path to ffuf or spray for scanning.

Frequently Asked Questions about local-resources

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the right local wordlist for ffuf directory brute force?▼

To find the right wordlist for directory brute force, locate files under /pentest/AboutSecurity/Dic/ and resolve the absolute path for ffuf. For PHP sites, select Web/Directory/php/Fuzz_php.txt and pass that path directly to your scanning tool.

What is the standard directory layout for local pentest payloads and POC files?▼

The standard layout for local pentest payloads and POC files is centralized under /pentest/AboutSecurity. This mapping organizes dictionaries, payloads, and POC files to standardize access and prevent incorrect file selection during offline scanning.

How do I choose the correct dictionary for password brute force with spray?▼

Choosing the correct dictionary for password brute force involves applying selection heuristics based on your target. Locate password lists under /pentest/AboutSecurity/Dic/, resolve the absolute path, and supply it to spray for validation.

Can I use local wordlists for CTF scenarios and payload validation?▼

Yes, you can use local wordlists for CTF scenarios and payload validation. The skill provides decision guidance to select appropriate dictionaries and POC files from /pentest/AboutSecurity, ensuring accurate path resolution for tools like nuclei.

Why does ffuf fail when I use relative paths for my fuzzing dictionaries?▼

ffuf fails with relative paths because scanning tools require absolute path resolution to locate dictionaries correctly. You must resolve the absolute path under /pentest/AboutSecurity/Dic/ and pass that exact path to avoid false assumptions and wasted time.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

web2-recon

Automate web2 reconnaissance with subdomain enumeration, URL crawling, and fuzzing.

Community
Advanced
ArianHobson333ArianHobson333
7

authentication

Test web authentication for default credentials, brute force, token flaws, and 2FA bypasses.

Community
Advanced
zebbernzebbern
34

Quick Pentest Reference

Provides rapid-fire command references for penetration testing tasks like enumeration and brute-forcing.

Community
Intermediate
letta-ailetta-ai
134

crack-7z-hash

Extract 7z archive hashes and recover passwords using cracking frameworks.

Official
Advanced