skills.rest
ludoplex
ludoplexCOMMUNITY
Explore all skills by this author →
GitHub

web-reconnaissance

Identify frameworks, CMSs, servers, and deployment details from web artifacts.

Updated Aug 27, 2026
Search Tags:#url-analysis#http-headers#web-reconnaissance#tech-fingerprint#markup-detection#cms-detection#server-identification
One-click install
npx skills add https://github.com/ludoplex/openclaw-deploy-template --skill web-reconnaissance
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web-reconnaissance
Source: https://github.com/ludoplex/openclaw-deploy-template/tree/main/openclaw-deploy-template/workspace/skills/web-reconnaissance
Command: npx skills add https://github.com/ludoplex/openclaw-deploy-template --skill web-reconnaissance

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly determine the technology stack, frameworks, CMS, and server details from web artifacts such as URLs, headers, markup, and metadata, enabling faster risk assessment, inventory, and targeting.

Core Features & Use Cases

  • Tech stack recognition from URLs and web content (headers, HTML, and structured data).
  • CMS and framework fingerprinting to reveal platform and version signals.
  • Server/hosting indicators and deployment patterns to inform security reviews and asset discovery.

Quick Start

Analyze the provided URLs and web content to identify the tech stack, CMS, servers, and deployment indicators.

Frequently Asked Questions about web-reconnaissance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify a website's tech stack from its URL and HTTP headers?▼

Identify a website's tech stack by parsing URLs, HTTP headers, and HTML meta patterns to extract framework, CMS, and server fingerprints. This approach reveals platform and version signals from web artifacts for inventory and risk assessment.

Can I detect CMS and framework versions from markup and JSON-LD signals?▼

Detect CMS and framework versions by applying fingerprinting to markup signals, HTML meta patterns, and JSON-LD. This extracts known technology fingerprints and deployment indicators from the page content to reveal the underlying platform details.

What is the best way to fingerprint web servers for threat modeling?▼

Fingerprint web servers for threat modeling by analyzing HTTP headers and URL structures to determine hosting providers and deployment patterns. This produces structured indicators suitable for assessing risk and targeting during security reviews.

Does web reconnaissance work without external dependencies or APIs?▼

Web reconnaissance works without external dependencies by parsing provided web artifacts directly. It analyzes URLs, HTTP headers, and markup signals internally to identify technologies and configurations, requiring no additional environment setup or external tool integrations.

Why does technology fingerprinting fail on heavily modified HTML meta patterns?▼

Technology fingerprinting fails when heavily modified HTML meta patterns obscure known signatures. Parsing relies on recognizing standard header and markup signals, so customized or stripped JSON-LD and meta tags can prevent accurate framework and CMS detection.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

html-content-analysis

Detect CMS, frameworks, CSS, and libraries in HTML content.

Community
Intermediate
bbrowningbbrowning
2

Reviewing Authentication and Authorization Security

Automate security reviews of JWT, OAuth 2.0/2.1, PKCE, and token exchange code.

Community
Advanced
macaughmacaugh
5

Service Fingerprinting

Detect network services and versions on discovered hosts via active probing.

Community
Advanced
dmzoneilldmzoneill
2

security-audit

Audit network and TLS configurations with nmap, openssl, curl, and ssh-keyscan.

Community
Advanced