skills.rest
transilienceai
transilienceaiOFFICIAL
Explore all skills by this author →
GitHub

web-application-mapping

Coordinate web-application reconnaissance to identify attack surfaces.

462|71|Updated Nov 21, 2025
Search Tags:#reconnaissance#web application#attack surface#SPA mapping#endpoint discovery#security assessment#SBOM
One-click install
npx skills add https://github.com/transilienceai/communitytools --skill web-application-mapping
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web-application-mapping
Source: https://github.com/transilienceai/communitytools/tree/main/pentest/.claude/skills/web-application-mapping
Command: npx skills add https://github.com/transilienceai/communitytools --skill web-application-mapping

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Thoroughly understanding a web application's structure, endpoints, and underlying technologies is crucial but time-consuming before any security testing can begin. This Skill automates the entire reconnaissance and mapping process, providing a complete attack surface inventory without manual effort.

Core Features & Use Cases

  • Comprehensive Endpoint Discovery: Actively scans for directories, files, APIs (REST, GraphQL), and uses headless browsers to map JavaScript-rendered pages and SPAs.
  • Technology Stack Identification: Catalogs all dependencies, frameworks, and libraries, generating a Software Bill of Materials (SBOM).
  • Attack Surface Analysis: Consolidates all discovered data to categorize and prioritize attack surfaces for subsequent vulnerability testing.
  • Use Case: Before a major security audit, use this Skill to automatically generate a complete, up-to-date map of your web application, including all hidden endpoints and client-side routes, ensuring no part of the application is overlooked during testing.

Quick Start

Perform a comprehensive web application mapping for example.com, including active scanning, API discovery, and JavaScript mapping.

Frequently Asked Questions about web-application-mapping

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map all endpoints and APIs in a web application before security testing?▼

Web application mapping automates comprehensive endpoint discovery across REST APIs, GraphQL, and JavaScript-rendered pages to create a complete attack surface inventory. The Skill actively scans directories, files, and client-side routes, consolidating results into a structured inventory ready for vulnerability testing.

Can I discover hidden endpoints and SPA routes in a single automated scan?▼

Yes. The Skill uses headless browser automation to map single-page application routes and JavaScript-rendered content alongside active directory scanning, capturing both server-side endpoints and client-side routes in one reconnaissance pass.

What technologies and dependencies does my web application use?▼

Web application mapping generates a Software Bill of Materials (SBOM) that catalogs all frameworks, libraries, and dependencies discovered during reconnaissance, providing a complete technology stack inventory for downstream security assessment.

How do I prioritize which parts of my application to test for vulnerabilities?▼

The Skill consolidates all discovered endpoints, APIs, and technologies into categorized attack surfaces, enabling you to systematically prioritize which application components and entry points warrant security testing based on exposure and complexity.

Do I need to manually identify API endpoints for security audits?▼

No. Automated endpoint discovery eliminates manual scanning by actively identifying REST APIs, GraphQL endpoints, and hidden directories across your web application, ensuring comprehensive coverage without oversight.

Related Skills

Explore More Software Engineering Skills→
bsamieebsamiee
2

tavily-tools

Execute Tavily AI web search, extraction, crawling, and site mapping via Python CLI.

Community
Advanced
sayseven7sayseven7
11

recon-for-sec

Plan reconnaissance workflows for new security testing targets.

Community
Intermediate
xijunwwxijunww
1

recon

Automate penetration testing reconnaissance to discover assets and attack surfaces.

Community
Advanced
AeonDaveAeonDave
15

dirsearch

Scan web servers for hidden directories and files with recursive scanning.

Community
Intermediate