scan-fase-15

Run FASE 15 supplemental scans combining Nuclei, Retire.js, Arjun, SQLMap, and Commix.

Updated Mar 11, 2026

Search Tags:#automation #security #nuclei #sqlmap #web-scanning #retire.js #arjun

Ready to run

npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-fase-15

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: scan-fase-15
Source: https://github.com/ricardoo022/PentestAI-with-claude-code/tree/main/.claude/skills/scan-fase-15
Command: npx skills add https://github.com/ricardoo022/PentestAI-with-claude-code --skill scan-fase-15

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Automates the detection and deep analysis phase of security testing by orchestrating multiple automated tools to uncover hidden vulnerabilities in web applications.

Core Features & Use Cases

Automated supplemental scans using Nuclei, Retire.js, Arjun, SQLMap, and Commix to identify CVEs, vulnerable libraries, hidden parameters, and OS command injection opportunities.
Deep analysis workflows including JS bundle reverse engineering, IOC extraction, threat modeling, and behavioral assessment across diverse stacks (Supabase, Firebase, Django, Node.js, Rails, Spring, .NET, PHP, Go, etc.).
Real-world use cases include discovering misconfigurations, exposed secrets, and insecure endpoints in complex web apps.

Quick Start

Invoke with /scan-fase-15 {url} to start automated supplemental scans and deep vulnerability exploration.

Frequently Asked Questions about scan-fase-15

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate web application vulnerability scanning with Nuclei and SQLMap?▼

Web vulnerability scanning combines Nuclei, SQLMap, Retire.js, Arjun, and Commix to detect CVEs, vulnerable libraries, hidden parameters, and OS command injection. It orchestrates these tools to uncover hidden vulnerabilities and exposed secrets in web applications.

What is deep reverse engineering of JavaScript bundles for security testing?▼

Deep reverse engineering of JS bundles extracts IOCs and uncovers misconfigurations or exposed secrets in complex web apps. It assesses application behavior across diverse stacks like Supabase, Firebase, Django, Node.js, Rails, Spring, .NET, PHP, and Go to model threats.

Do I need prior scan outputs to run automated supplemental security scans?▼

Automated supplemental security scans require prior FASE 0 and FASE 1 outputs, an accessible target URL, and documented findings in clients/{client}/SCAN-IN-PROGRESS.md. These inputs tailor the deep vulnerability evaluation and behavioral analysis.

How do I find hidden parameters and command injection vulnerabilities in web apps?▼

Finding hidden parameters and command injection vulnerabilities uses Arjun for parameter discovery and Commix for OS command injection detection. These automated tools identify insecure endpoints and exposed attack surfaces during supplemental scanning.

Can I use automated web scanning tools across different backend stacks like Django and Node.js?▼

Automated web scanning tools support behavioral analysis across diverse stacks including Django, Node.js, Rails, Spring, .NET, PHP, and Go. The deep analysis workflows adapt threat modeling and vulnerability detection to the specific backend architecture.

What are the limitations of combining multiple automated security scanning tools?▼

Limitations of combining multiple automated security scanning tools include the strict requirement for prior FASE 0 and FASE 1 outputs and a documented target URL. Without these foundational scan artifacts and an accessible target, the supplemental evaluation cannot be tailored or executed.