Scan web servers for exposed sensitive files and hidden endpoints.
npx skills add https://github.com/uphiago/recon-skills --skill web-enumeration
Please help me install this Agent Skill. Skill: web-enumeration Source: https://github.com/uphiago/recon-skills/tree/main/recon/web-enumeration Command: npx skills add https://github.com/uphiago/recon-skills --skill web-enumeration
This skill solves the problem of manually scanning web targets for exposed sensitive files, hidden endpoints, configuration leaks, and cached data that are often overlooked during initial reconnaissance, which can lead to missed high-severity findings and delayed compromise of target systems.
Use the web-enumeration skill to scan the target domain https://target.com for exposed sensitive files, path traversal vulnerabilities, and hidden virtual hosts, then extract any credentials found in .env files or application logs.
High-intent search queries and answers about installing and using this skill.
Testing path traversal bypasses applies 10+ encoding techniques to access restricted sensitive files blocked by default server configurations. This approach circumvents standard access controls to verify if sensitive data remains exposed behind weak path validation filters.
Credential extraction automatically pulls database credentials, API keys, JWTs, and SQL queries directly from exposed .env files and application logs. This allows penetration testers to quickly harvest valid authentication data for further testing and system compromise.
vHost enumeration probes common virtual hostnames to discover hidden internal, staging, or development subdomains. This technique identifies hidden web assets that often host exposed files or weaker security controls compared to the primary production target.
WAF bypass guidance provides proven techniques to circumvent web application firewalls, 403 access restrictions, and CDN catch-all behaviors. This ensures standard sensitive path scanning tools can successfully reach and evaluate restricted target endpoints.
Web enumeration applies directly to penetration testing, red teaming, and bug bounty workflows. It satisfies initial reconnaissance requirements by locating high-severity entry points like exposed Dockerfiles and JavaScript source maps on target domains.
phatblatAutomate infrastructure and network reconnaissance for domains, IPs, and netblocks.
uphiagoDiscover unauthenticated API endpoints and validate full CRUD access.
transilienceaiCoordinate subdomain discovery and port scanning to build a domain attack surface inventory.
cxnaivePerform authorized web application penetration testing with reconnaissance, vulnerability analysis, and proof-based exploitation.
