web-discovery

Discover web application injection points and test for common vulnerability classes.

253|37|Updated Feb 22, 2026

Search Tags:#vulnerability #injection #discovery #web #pentest #recon

Ready to run

npx skills add https://github.com/blacklanternsecurity/red-run --skill web-discovery

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web-discovery
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/web/web-discovery
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill web-discovery

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ffuf, arjun, paramspider, wpscan, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps penetration testers discover vulnerabilities in web applications by identifying attack surfaces, testing for common vulnerability classes, and reporting findings.

Core Features & Use Cases

Content Discovery: Finds hidden endpoints, directories, and files using various wordlists.
Parameter Discovery: Identifies undocumented parameters in GET, POST, JSON, and XML requests.
Injection Point Testing: Tests discovered parameters for SQLi, XSS, SSTI, Command Injection, SSRF, and more.
Use Case: A penetration tester needs to find all potential injection points on a target web application. This Skill will systematically scan for hidden content, discover parameters, and test each one for common vulnerabilities, reporting any confirmed findings.

Quick Start

Use the web-discovery skill to find hidden directories on the target website example.com.

Frequently Asked Questions about web-discovery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find hidden web application endpoints and parameters during a pentest?▼

To find hidden web application endpoints and parameters during a pentest, you can use content and parameter discovery techniques to scan for undocumented directories, files, and GET, POST, JSON, or XML inputs using tools like ffuf, arjun, and paramspider.

What is the best way to test for common injection vulnerabilities like SQLi and XSS?▼

The best way to test for common injection vulnerabilities like SQLi and XSS is to systematically discover hidden parameters and then test each identified input point for multiple vulnerability classes, including SSTI, command injection, and SSRF.

Do I need wpscan to perform comprehensive web vulnerability discovery?▼

You need wpscan for comprehensive web vulnerability discovery if the target application is built on WordPress, as it specifically helps identify WordPress vulnerabilities, while ffuf, arjun, and paramspider handle general content and parameter discovery.

How does web application reconnaissance route to specific exploitation skills?▼

Web application reconnaissance routes to specific exploitation skills by systematically identifying attack surfaces and injection points, then handing off the confirmed findings to appropriate exploitation modules during authorized penetration testing.

Can I discover undocumented JSON and XML request parameters for web pentesting?▼

You can discover undocumented JSON and XML request parameters for web pentesting by using parameter discovery tools like arjun and paramspider to systematically scan and identify hidden inputs across various request formats.

What are the limitations of automated injection point testing for web vulnerabilities?▼

Limitations of automated injection point testing include relying heavily on wordlist quality for content discovery and requiring authorized access, as testing only covers common vulnerability classes like SQLi, XSS, SSTI, and command injection without guaranteeing complete coverage.