techstack-backend

Backend tech-stack identification — web servers, runtimes, languages, frameworks, databases, APIs, and CMS via HTTP headers, cookies, error pages, and API discovery.

Jump to install Review files

Repository: transilienceai/communitytools
Last source activity: May 11, 2026 at 07:02
Detected SKILL.md language: English
Stars: 560
Forks: 80

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with an AI assistant

Copy this prompt into the AI assistant you're using.

Follow https://skillsmp.com/skill-install/prompt.md to install only the Agent Skill at https://github.com/transilienceai/communitytools/tree/main/skills/techstack-identification/backend.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/transilienceai/communitytools --skill techstack-backend

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

2 files

SKILL.md

Source instructions · Read-only preview

name: techstack-backend
description: Backend tech-stack identification — web servers, runtimes, languages, frameworks, databases, APIs, and CMS via HTTP headers, cookies, error pages, and API discovery.

# Backend Tech-Stack Identification ## Scope Identify server-side technologies: web servers (nginx, Apache, IIS), runtimes (Node, Python, PHP, Ruby, Java, .NET), backend frameworks (Express, Django, Flask, Rails, Laravel, Spring, ASP.NET), databases (Postgres, MySQL, Mongo, Redis), CMS (WordPress, Drupal, Magento), and API surfaces (REST, GraphQL, OpenAPI). ## Signals (input) - HTTP response headers — `Server`, `X-Powered-By`, `X-AspNet-Version`, `X-Drupal-*`, `X-Generator`, etc. - Cookies — session-name fingerprints (`PHPSESSID`, `JSESSIONID`, `_rails_session`, ...) - Error page bodies (404, 500) - Path patterns hinting CMS (`/wp-admin/`, `/sites/default/`) - API subdomains and OpenAPI/Swagger/GraphQL endpoints - `robots.txt` directives ## Inferences (output) - Web server + version - Runtime / language + version - Backend framework (with implied runtime) - CMS + version - Database (often indirect — via ORM dependency or hosted-DB DNS) - API style (REST/GraphQL/gRPC) and authentication scheme ## Techniques See [reference/patterns.md](reference/patterns.md). ## When to use - Phase 2/3 of a tech-stack OSINT engagement - Mapping server-side attack surface (RCE, SSRF, deserialization) - CVE matching by server + version - Locating GraphQL / OpenAPI for follow-on api-security testing

View on GitHub

Back to search Back to installation

ai-threat-testing

Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.

2026-07-29

cloud-containers

Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

2026-07-29

pentest-engagement

Run a professional penetration engagement OR a network vulnerability scan from a scope. WEB mode (apex domains / app URLs) — mandatory surface expansion, systematic OWASP attack-class coverage, reversible active exploitation, authoritative validation, Transilience PDF. NETWORK mode (a list of IPs/CIDRs, e.g. 1500 hosts) — machine-prudent BATCHED tool-first nmap sweep (host discovery + bounded common+less-common port/service scan + CVE surfacing) with a uniform per-IP output tree, then bounded deep-dives on the highest-value hosts. The general (non-CTF) analogue of hackthebox/htb-solve.

2026-07-28

View all from this repository

techstack-backend

Source facts

Install options

Install with an AI assistant

Review the source files

More from this repository

Install with an AI assistant

More from this repository