Fingerprint exposed web applications and services from HTTP, banners, headers, and TLS data.
npx skills add https://github.com/yv1ing/Z3r0 --skill observer-ward
Please help me install this Agent Skill. Skill: observer-ward Source: https://github.com/yv1ing/Z3r0/tree/main/sandbox/.agents/skills/observer-ward Command: npx skills add https://github.com/yv1ing/Z3r0 --skill observer-ward
Identify exposed web applications and services through fingerprinting for authorized targets.
Run observer_ward against your in-scope targets to fingerprint web applications and services.
High-intent search queries and answers about installing and using this skill.
Fingerprint web applications by analyzing HTTP headers, banners, TLS data, and probe outputs. This Skill processes authorized targets via -t/--target or -l/--list inputs to identify product names, versions, and technologies for quick triage and evidence gathering.
Yes, you can output machine-readable JSON with evidence details during reconnaissance. Use the optional --ir or --ic flags to emit matched product names, versions, and contexts to prioritize your validation work.
Yes, observer-ward enforces explicit target authorization before running any fingerprinting probes. This ensures all HTTP target reconnaissance, banner analysis, and TLS data extraction remains strictly within your approved assessment scope.
The best way to identify exposed web services is lightweight fingerprinting of HTTP headers and banners. This maps target technology footprints quickly, informing further validation steps and evidence-driven triage for your red-team assessment.
Process multiple in-scope HTTP targets by passing a file list using the -l/--list flag. The Skill fingerprints each authorized target and emits machine-readable JSON results with product names and versions for evidence gathering.
Fingerprinting requires probe outputs and banner analysis alongside HTTP headers to accurately identify product names and versions. Combining these data sources provides comprehensive evidence for mapping exposed web applications and technologies.
ringlochidPerform authorized attacker-style probes on scoped test environments.
EntroVyxDetect WordPress plugin versions and match them against CVE databases.
darblexScan targets with Nmap to find open ports and detect services.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
