webapp-pentesting

What problem does it solve?

This Skill provides a structured, phase-driven approach to web application security testing, guiding you from reconnaissance through exploitation to reporting to uncover vulnerabilities efficiently.

Core Features & Use Cases

• Phase-aligned workflow covering Recon, Scan, Enumerate, Exploit, Post-Exploit, and Report.
• SPA-aware discovery and client-side route analysis to uncover hidden attack surfaces.
• Integrated toolchain support (rustscan, nmap, httpx, nuclei, nikto, ffuf, BurpSuite, Metasploit, Playwright) with stealth testing guidance.
• Automated output suitable for verification and documentation workflows, aligned with vulnerability-verification and reporting skills.
• Real-world use cases include OWASP Top 10 testing on web apps, APIs, and SPA-centric architectures.

Quick Start

Follow the guided flow to perform recon, scanning, and enumeration on a target URL within scope.