skills.rest
crazyMarky
crazyMarkyCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

recon-fingerprint

Identify web technologies, frameworks, CMS, and WAF/CDN solutions using whatweb, wafw00f, nuclei, and httpx.

277|29|Updated Feb 6, 2026
Search Tags:#reconnaissance#httpx#fingerprinting#nuclei#whatweb#web technologies#waf detection
One-click install
npx skills add https://github.com/crazyMarky/pentest-skills --skill recon-fingerprint
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-fingerprint
Source: https://github.com/crazyMarky/pentest-skills/tree/main/recon-fingerprint
Command: npx skills add https://github.com/crazyMarky/pentest-skills --skill recon-fingerprint

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps you quickly identify the technologies, frameworks, Content Management Systems (CMS), and Web Application Firewalls (WAFs) used by a web application, providing crucial intelligence for security assessments.

Core Features & Use Cases

  • Technology Fingerprinting: Detects web servers (Nginx, Apache), backend languages (PHP, Python), frontend frameworks (React, Vue), and CMS (WordPress, Drupal).
  • WAF/CDN Detection: Identifies security solutions like Cloudflare, AWS WAF, and others.
  • Use Case: When assessing a new web target, use this Skill to understand its technology stack, helping you choose the right attack vectors and identify potential vulnerabilities associated with specific versions or configurations.

Quick Start

Identify the web technologies and WAF for the website example.com.

Frequently Asked Questions about recon-fingerprint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify web technologies and frameworks used by a target website?▼

You can identify web technologies and frameworks by running this Skill against a target domain. It detects web servers like Nginx, backend languages like PHP, frontend frameworks like React, and CMS platforms like WordPress to provide comprehensive technology stack intelligence for security assessments.

What is the best way to detect a WAF or CDN protecting a web application?▼

The best way to detect a WAF or CDN is by using this Skill's WAF detection capabilities. It identifies security solutions like Cloudflare and AWS WAF, helping you understand the target's defensive perimeter before attempting penetration testing or vulnerability scanning.

Can I use httpx and whatweb together for comprehensive web fingerprinting?▼

Yes, this Skill utilizes httpx, whatweb, wafw00f, and nuclei together for comprehensive web fingerprinting. Combining these tools allows you to detect web servers, CMS platforms, and WAF/CDN solutions in a single reconnaissance workflow.

How do I fingerprint a CMS like WordPress during a security audit?▼

To fingerprint a CMS like WordPress during a security audit, provide the target URL to this Skill. It analyzes the web application to identify the specific CMS, frameworks, and configurations in use, which helps you choose appropriate attack vectors and identify version-specific vulnerabilities.

Does web technology fingerprinting work without installing external dependencies?▼

Yes, this web technology fingerprinting Skill works without installing external dependencies. It operates independently to identify web servers, backend languages, frontend frameworks, and WAF solutions, streamlining the reconnaissance process for penetration testing scenarios.

Related Skills

Explore More Software Engineering Skills→
Prohao42Prohao42
120

recon-and-methodology

Map assets, enumerate endpoints, and fingerprint technologies for target reconnaissance.

Community
Advanced
zzw4257zzw4257

Nuclei

Automate vulnerability scanning and misconfiguration detection with template-based Nuclei scans.

Community
Intermediate
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
babdulhakim2babdulhakim2

Domain WHOIS Lookup

Retrieve domain registration, ownership, and DNS information for investigations.

Community
Intermediate