recon-dir-scan

Enumerate exposed directories and files on web applications using ffuf, gobuster, dirsearch, and feroxbuster.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/0X6C7879/aegissec --skill recon-dir-scan-0x6c7879
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: recon-dir-scan
Source: https://github.com/0X6C7879/aegissec/tree/main/skills/recon-dir-scan
Command: npx skills add https://github.com/0X6C7879/aegissec --skill recon-dir-scan-0x6c7879

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Directory and file enumeration is essential for mapping the structure of a web application, revealing hidden directories, backup files, and sensitive endpoints that attackers or auditors need to assess.

Core Features & Use Cases

  • Integrates multiple industry-standard tools (ffuf, gobuster, dirsearch, feroxbuster) to perform fast, comprehensive path discovery.
  • Produces actionable results that help identify exposed directories, backup files, and misconfigurations for remediation or further testing.
  • Use cases include bug bounty recon, security hardening, compliance checks, and penetration testing preparation.

Quick Start

Run this skill against a target to enumerate directories and files.

Frequently Asked Questions about recon-dir-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover hidden directories and files during a web application pentest?

Directory and file enumeration maps a web application's structure to reveal hidden directories and sensitive endpoints. It integrates tools like ffuf, gobuster, dirsearch, and feroxbuster to perform fast path discovery for security assessments and compliance testing.

What is the best way to enumerate web directories for bug bounty recon?

Using multiple industry-standard tools like ffuf, gobuster, dirsearch, and feroxbuster ensures comprehensive path discovery. This approach produces actionable results that identify exposed directories and misconfigurations for bug bounty recon and penetration testing preparation.

Can I use ffuf and gobuster for directory enumeration on APIs and CMS platforms?

Yes, directory and file enumeration is applicable to security assessments across static sites, dynamic apps, APIs, and CMSs. The tool integrations like ffuf and gobuster perform comprehensive path discovery to map the structure of these diverse web application types.

Does this directory enumeration approach work without installing external dependencies?

The skill relies on tool integrations like ffuf, gobuster, dirsearch, and feroxbuster to perform web directory discovery. It includes prerequisites and safety warnings to ensure proper environment setup before mapping the target application structure.

What are the limitations of using automated directory enumeration for compliance testing?

Automated directory enumeration requires careful execution due to included safety warnings and prerequisites. While it effectively maps application structure and finds exposed files, users must manage optional storage of findings and interpret results for valid compliance checks.