stress-scan

Orchestrate vulnerability agents to assess web surfaces and verify findings via HTTP and OOB channels.

1|Updated Mar 20, 2026

Search Tags:#automation #vulnerability #verification #multi-agent #web security #OOB

Ready to run

npx skills add https://github.com/enderphan94/pentest-kit --skill stress-scan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: stress-scan
Source: https://github.com/enderphan94/pentest-kit/tree/main/skills/stress-scan
Command: npx skills add https://github.com/enderphan94/pentest-kit --skill stress-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, nuclei, dalfox, sqlmap, interactsh-client, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enables comprehensive, automated vulnerability assessments by coordinating multiple specialized agents to analyze web application surfaces efficiently.

Core Features & Use Cases

Parallel Vulnerability Scanning: Simultaneously tests for injection, XSS, SSRF, auth, misconfigurations, secrets, and infrastructure issues.
Automated Verification: Confirms findings through curl rechecks and OOB callback detections, reducing false positives.
Use Case: Quickly assess a web app for multiple vulnerability classes with minimal manual intervention by running the stress-scan skill on the target URL after reconnaissance.

Quick Start

Invoke the stress-scan skill with your target URL and optional configuration to initiate multi-domain vulnerability assessment.

Frequently Asked Questions about stress-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate web vulnerability scanning across multiple domains?▼

Automate web vulnerability scanning by orchestrating specialized agents that test injection, XSS, SSRF, and misconfigurations in parallel. This coordinates multiple tools across seven security domains to assess web surfaces efficiently with minimal manual intervention.

How does out-of-band verification reduce false positives in security testing?▼

Out-of-band verification reduces false positives by confirming findings through OOB callback detections and HTTP request rechecks. Instead of relying solely on response patterns, it validates vulnerabilities like SSRF using external interactsh-client callbacks.

What's the best way to verify nuclei and sqlmap vulnerability scan results?▼

The best way to verify vulnerability scan results is automating curl rechecks and out-of-band callback detections. This confirms findings from tools like nuclei, sqlmap, and dalfox by validating actual HTTP responses and external interactions.

Do I need reconnaissance output files before running automated vulnerability assessments?▼

Yes, automated vulnerability assessments require stress-recon output files as input prerequisites. You must gather reconnaissance data on your target URL first, then feed those files into the scanning workflow to initiate multi-domain testing.

Can I use curl and nuclei together for parallel web application security testing?▼

Yes, curl and nuclei work together for parallel web application security testing alongside dalfox, sqlmap, and interactsh-client. This multi-agent approach simultaneously tests injection, XSS, auth, and infrastructure vulnerabilities across web surfaces.

What are the limitations of automated multi-agent vulnerability detection?▼

Automated multi-agent vulnerability detection requires specific dependencies including curl, nuclei, dalfox, sqlmap, and interactsh-client. While it reduces false positives through OOB verification, complex logic flaws or business-logic vulnerabilities may still require manual testing.