メニュー
Web path scanner for finding hidden directories and files. Use when you need to brute-force discover accessible paths, admin panels, backup files, or hidden endpoints on a web server.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Automated tool-assisted strategies for blind injection attacks (SQL, NoSQL, command, XPath). Covers when and how to use sqlmap, custom scripting, and binary search optimization to minimize token consumption and execution time. Use when manual blind injection would require >20 sequential requests.
HTTP Request Smuggling (HRS) / Desync attack detection and exploitation. Covers CL.TE, TE.CL, TE.TE detection, payload crafting, and chaining with SSRF/cache poisoning. Use when front-end/back-end architecture is suspected or when HTTP parsing discrepancies exist.
Race condition vulnerability detection and exploitation. Covers time-of-check to time-of-use (TOCTOU), limit bypass, coupon abuse, and multi-endpoint race chains. Use when state-dependent logic (credits, inventory, votes, transfers) exists or CTF challenge involves concurrent operations.
Canonical Nmap CLI syntax, strict staged scanning workflow, and sandbox-safe bounded scan patterns with timeout backoff.
Exact Nuclei command structure, template selection, staged scanning workflow, and bounded high-throughput execution controls with timeout backoff.
Common CTF exploitation patterns, quick wins, and time-saving tricks for web, crypto, pwn, and misc challenges. Use when you are stuck on a CTF challenge or want to rapidly test known patterns.
| name | dirsearch |
| description | Web path scanner for finding hidden directories and files. Use when you need to brute-force discover accessible paths, admin panels, backup files, or hidden endpoints on a web server. |
| compatibility | Requires dirsearch to be installed on the system. |
| metadata | {"category":"reconnaissance","tool":"dirsearch"} |
Use this skill when the task involves:
Scan a single URL:
dirsearch -u <target>
Scan with specific extensions:
dirsearch -u <target> -e php,html,js,txt,bak
Use a custom wordlist:
dirsearch -u <target> -w /path/to/wordlist.txt
| Flag | Description |
|---|---|
-u <url> | Target URL |
-e <exts> | Extensions to scan (comma-separated) |
-w <file> | Custom wordlist |
-t <threads> | Number of threads |
-r | Follow redirects |
-x <codes> | Exclude status codes |
-o <file> | Output file |
--json-report | Output in JSON format |