メニュー
Scoped web content discovery with the bundled dirsearch source tree. Use when the operator explicitly asks for dirsearch, directory enumeration, hidden file discovery, content brute forcing, or low-risk path discovery on authorized HTTP or HTTPS targets.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
DNS out-of-band (OOB) reflection / exfiltration via CEYE platform. Use when the operator asks for DNS OOB testing, out-of-band data exfiltration, blind injection verification via DNS, or CEYE record queries.
Scoped host-level reconnaissance with the bundled Nmap distribution. Use when the operator explicitly asks for nmap, port scanning, service enumeration, host reachability checks, or low-risk host discovery on authorized targets.
Safe first-pass web reconnaissance workflow for browser-assisted pentesting. Use when starting assessment on a web app, mapping exposed pages and flows, collecting passive evidence, or deciding whether deeper scripted discovery such as dirsearch, nmap, or sqlmap is justified.
Scoped SQL injection verification with the bundled sqlmap source tree. Use when the operator explicitly asks for sqlmap, SQL injection testing, raw HTTP request replay, form or anti-CSRF-aware injectable parameter verification, or conservative database fingerprinting and schema enumeration on authorized HTTP or HTTPS targets.
SOC 職業分類に基づく
| name | dirsearch-recon |
| description | Scoped web content discovery with the bundled dirsearch source tree. Use when the operator explicitly asks for dirsearch, directory enumeration, hidden file discovery, content brute forcing, or low-risk path discovery on authorized HTTP or HTTPS targets. |
| activation | auto |
| version | 1.0 |
| tags | ["recon","web","directory-enumeration"] |
| requires_tools | ["list_skill_scripts","run_skill_script"] |
| when_to_use | When the operator asks for directory enumeration, hidden file discovery, path brute forcing, or dirsearch-related tasks. |
Use this skill for conservative web path discovery on authorized targets.
list_skill_scripts(skill_name="dirsearch-recon") if you need to confirm the packaged script names.scripts/dirsearch_status.py first to confirm the vendored source tree and Python dependencies are ready.scripts/dirsearch_scan.py for actual scans.threads low.wordlist_categories before custom large wordlists.artifacts/.../dirsearch/ and summarize only evidence-backed paths.scripts/ directory is for deterministic helper logic. Use list_skill_scripts to inspect it.run_skill_script(skill_name="dirsearch-recon", script_name="dirsearch_scan.py", args_json='["--target","https://app.example.internal","--wordlist-categories","common,conf,web"]') is the preferred scan entrypoint.dirsearch_scan.py enforces scope, saves plain and JSON reports, and records a dirsearch-log.jsonl audit trail.dependency_check.required_available=false, install the missing packages into the repo environment before scanning.