webcopilot

Chain 20+ security tools into a single web reconnaissance and vulnerability scanning pipeline.

Updated Apr 10, 2026

Search Tags:#web-security #toolchain #web-recon #nuclei #vulnerability-scanning #subdomain-enumeration #dalfox

Ready to run

npx skills add https://github.com/stevengonsalvez/nanoclaw-standalone --skill webcopilot

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: webcopilot
Source: https://github.com/stevengonsalvez/nanoclaw-standalone/tree/main/container/skills/webcopilot
Command: npx skills add https://github.com/stevengonsalvez/nanoclaw-standalone --skill webcopilot

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates comprehensive web security reconnaissance and vulnerability scanning by chaining 20+ security tools into a single automated pipeline.

Core Features & Use Cases

Subdomain enumeration using assetfinder, subfinder, amass, findomain, crt.sh
Active subdomain brute forcing with gobuster and SecLists
Live host filtering with dnsx and httpx
Subdomain takeover checks with subjack
Endpoint crawling with gau, waybackurls, waymore
Parameter filtering using gf patterns for XSS, SQLi, SSRF, LFI, RCE, Open Redirect
Vulnerability scanning with dalfox, nuclei, sqlmap, crlfuzz

Quick Start

Run webcopilot with a target domain to start the full reconnaissance and vulnerability scan.

Frequently Asked Questions about webcopilot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate web reconnaissance and vulnerability scanning for a domain?▼

Automate web reconnaissance and vulnerability scanning by chaining 20+ security tools into a single pipeline, covering subdomain enumeration, live host detection, crawling, and multi-tool assessments for XSS, SQLi, SSRF, LFI, and RCE.

What tools are used for subdomain enumeration and live host detection?▼

Subdomain enumeration uses assetfinder, subfinder, amass, findomain, and crt.sh, while active brute forcing uses gobuster with SecLists. Live host detection and filtering are then handled by dnsx and httpx.

How can I scan for XSS and SQLi vulnerabilities across discovered web assets?▼

Scan for XSS, SQLi, and other vulnerabilities using integrated tools like dalfox, nuclei, sqlmap, and crlfuzz. Endpoint crawling with gau and waybackurls extracts parameters filtered by gf patterns for targeted assessments.

Does this vulnerability scanning pipeline require external dependencies or installations?▼

The pipeline integrates 20+ external security tools such as nuclei, subfinder, gobuster, and dalfox. You must ensure these underlying toolchains are installed and accessible in your environment before running the automated scan.

Can I check for subdomain takeover risks during web asset reconnaissance?▼

Subdomain takeover checks are included in the web asset reconnaissance pipeline using subjack. This runs alongside subdomain enumeration and live host detection to identify vulnerable DNS configurations.

What is the best way to chain multiple security tools for comprehensive web testing?▼

Chaining multiple security tools into a unified automated pipeline provides comprehensive web testing by sequentially executing subdomain enumeration, endpoint crawling, and multi-vector vulnerability assessments with consolidated output.