web-enumeration

Scans web targets for exposed files, misconfigurations, and exploitable endpoints.

3|1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill web-enumeration-entrovyx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web-enumeration
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/recon/web-enumeration
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill web-enumeration-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes references (resource) components.

What problem does it solve?

This skill automates the discovery of exposed sensitive files, misconfigurations, and infrastructure leaks that are often overlooked during initial reconnaissance, preventing manual oversight in security assessments.

Core Features & Use Cases

  • Sensitive File Discovery: Scans for over 200 common paths including .env files, git repositories, and actuator endpoints.
  • Vulnerability Detection: Identifies path traversal, vHost misconfigurations, and log data leaks.
  • Use Case: Quickly audit a target's web infrastructure to find exposed environment variables or backup files that could lead to full credential access.

Quick Start

Use the web-enumeration skill to scan the target domain example.com for sensitive files and configuration leaks.

Frequently Asked Questions about web-enumeration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find exposed .env files and git repositories on a web target?

To find exposed .env files and git repositories, automated web enumeration systematically probes over 200 common paths. This process identifies sensitive files and infrastructure misconfigurations often missed during manual reconnaissance.

What is the best way to scan for path traversal vulnerabilities and vHost misconfigurations?

The best way to scan for path traversal vulnerabilities and vHost misconfigurations is to automate path probing and response analysis. This detects infrastructure leaks and exposed log data without the oversight common in manual checks.

Do I need network connectivity and the requests library to perform sensitive file discovery?

Yes, you need active network connectivity and standard HTTP request handling via the requests library to perform sensitive file discovery. These dependencies are required to systematically probe target paths and analyze HTTP responses.

Can I use automated path probing for bug bounty hunting reconnaissance?

Yes, you can use automated path probing for bug bounty hunting reconnaissance. It rapidly audits web infrastructure to identify exposed environment variables, backup files, and actuator endpoints that could lead to credential access.

What types of infrastructure leaks can web enumeration detect during a security assessment?

Web enumeration detects infrastructure leaks such as exposed environment variables, backup files, actuator endpoints, and log data. It automates the discovery of these misconfigurations to prevent manual oversight in security assessments.