skills.rest
dapperdivers
dapperdiversCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

web-recon

Identify exposed services, technologies, directories, and TLS configurations on web applications.

1|1|Updated Feb 8, 2026
Search Tags:#penetration testing#port scanning#web reconnaissance#technology detection#directory enumeration#ssl analysis
One-click install
npx skills add https://github.com/dapperdivers/roundtable-arsenal --skill web-recon-dapperdivers
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web-recon
Source: https://github.com/dapperdivers/roundtable-arsenal/tree/main/pentest/web-recon
Command: npx skills add https://github.com/dapperdivers/roundtable-arsenal --skill web-recon-dapperdivers

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, curl, sslscan, and includes scripts (resource) components.

What problem does it solve?

This Skill helps security professionals quickly understand a web target's exposed services, technologies, directories, and TLS configuration without performing manual reconnaissance steps.

Core Features & Use Cases

  • Port and Service Discovery: Scan targets for open ports, running services, and version information to identify exposed infrastructure.
  • Web Technology Analysis: Detect frameworks, server headers, metadata, and common technologies used by web applications.
  • Directory and TLS Enumeration: Discover accessible paths and analyze SSL/TLS protocols, certificates, and cipher configurations during security assessments.

Quick Start

Use the web-recon skill to perform a complete reconnaissance assessment of the target web application and summarize the discovered ports, technologies, directories, and TLS findings.

Frequently Asked Questions about web-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map a web attack surface for a penetration testing assessment?▼

Web attack surface mapping identifies exposed services, open ports, running technologies, accessible directories, and SSL/TLS configurations. This automates reconnaissance to reveal infrastructure details before deeper security testing.

What is the best way to detect web application technologies and server headers?▼

Web technology detection analyzes server headers, metadata, and framework signatures during reconnaissance. This identifies the underlying software stack and configurations, exposing potential vulnerabilities for security assessments.

How do I enumerate directories and analyze SSL/TLS certificates during security testing?▼

Directory enumeration discovers accessible paths, while SSL analysis evaluates protocols, certificates, and cipher configurations. Combining both during security assessments reveals web application exposure and encryption weaknesses.

Do I need nmap and curl installed to perform web reconnaissance?▼

Yes, web reconnaissance requires scanning and enumeration utilities like nmap, curl, and sslscan. These dependencies collect port, directory, technology, and TLS security information necessary for complete infrastructure analysis.

Does web reconnaissance work for attack surface mapping across multiple targets?▼

Web reconnaissance applies to attack surface mapping and web infrastructure analysis scenarios. It identifies exposed services and application technologies, making it suitable for assessing security across various web targets.

Related Skills

Explore More Legal & Compliance Skills→
darblexdarblex

Nmap Recon

Scan targets with Nmap to find open ports and detect services.

Community
Intermediate
SkobynSkobyn

hunt-tls-network

Detect TLS/SSL and DNS security vulnerabilities using testssl.sh, sslyze, dig, and curl.

Community
Advanced
ricardoo022ricardoo022

scan-fase-19

Map external and internal attack surfaces with infrastructure reconnaissance.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

Burp Suite Web Application Testing

Intercept and modify HTTP traffic to test web application security.

Community
Advanced