skills.rest
0X6C7879
0X6C7879COMMUNITY
Explore all skills by this author →
GitHub

recon-fingerprint

Identify web technologies, WAF/CDN presence, and server headers from a target site.

Updated Aug 27, 2026
Search Tags:#httpx#nuclei#whatweb#waf detection#web fingerprinting#server headers
One-click install
npx skills add https://github.com/0X6C7879/aegissec --skill recon-fingerprint-0x6c7879
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recon-fingerprint
Source: https://github.com/0X6C7879/aegissec/tree/main/skills/recon-fingerprint
Command: npx skills add https://github.com/0X6C7879/aegissec --skill recon-fingerprint-0x6c7879

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires StorageAPI, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Fingerprint web technologies, identify WAF/CDN presence, and analyze server headers for quick security posture awareness and asset inventory.

Core Features & Use Cases

  • Web technology detection using standard tools like WhatWeb, Nuclei, and HTTPX to surface technology stacks, CMS, and frameworks.
  • WAF/CDN detection via header patterns, cookies, and content analysis to reveal protection layers and delivery networks.
  • Server header and header pattern matching to infer software and configurations for quick risk assessment.
  • Use Case: When assessing a web asset, run this skill to obtain a concise fingerprint of technologies, WAF/CDN presence, and accessible endpoints to plan further testing.

Quick Start

Run the fingerprinting workflow against a target URL to produce a structured fingerprint report.

Frequently Asked Questions about recon-fingerprint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect web technologies and CMS frameworks used by a target site?▼

WAF and CDN detection reveals protection layers and delivery networks by analyzing header patterns, cookies, and content from a target site, providing quick awareness of the security posture before planning further testing.

Can I use Nuclei and HTTPX together for web fingerprinting?▼

Yes, web fingerprinting leverages Nuclei and HTTPX integrations alongside WhatWeb to surface technology stacks, CMS, and frameworks, combining header analysis and content matching to produce structured fingerprint results.

What is the best way to profile web app tech stacks for asset inventory?▼

The best way to profile web app tech stacks is running a fingerprinting workflow against a target URL, which uses header pattern matching and tool integrations to infer software configurations and generate a concise structured fingerprint report.

Does web fingerprinting for security assessments require a StorageAPI dependency?▼

Web fingerprinting for security assessments requires the StorageAPI dependency to store structured fingerprint results, ensuring technology stacks, WAF presence, and accessible endpoints are saved for rapid tech profiling.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

spray-dir-brute

Automate directory brute-forcing and fingerprinting of web targets with spray.

Official
Advanced
HacktronAIHacktronAI
112

waf-bypass-hunter

Test payload variants against a Go WAF and Node.js backend to discover parser-differential bypasses.

Official
Advanced
chainreactorschainreactors
235

spray

Probe HTTP services and fingerprint web technologies on target hosts.

Official
Intermediate
crazyMarkycrazyMarky
277

recon-fingerprint

Identify web technologies, frameworks, CMS, and WAF/CDN solutions using whatweb, wafw00f, nuclei, and httpx.

Community
Intermediate