메뉴
Scoped web content discovery with the bundled dirsearch source tree. Use when the operator explicitly asks for dirsearch, directory enumeration, hidden file discovery, content brute forcing, or low-risk path discovery on authorized HTTP or HTTPS targets.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
DNS out-of-band (OOB) reflection / exfiltration via CEYE platform. Use when the operator asks for DNS OOB testing, out-of-band data exfiltration, blind injection verification via DNS, or CEYE record queries.
Scoped host-level reconnaissance with the bundled Nmap distribution. Use when the operator explicitly asks for nmap, port scanning, service enumeration, host reachability checks, or low-risk host discovery on authorized targets.
Safe first-pass web reconnaissance workflow for browser-assisted pentesting. Use when starting assessment on a web app, mapping exposed pages and flows, collecting passive evidence, or deciding whether deeper scripted discovery such as dirsearch, nmap, or sqlmap is justified.
Scoped SQL injection verification with the bundled sqlmap source tree. Use when the operator explicitly asks for sqlmap, SQL injection testing, raw HTTP request replay, form or anti-CSRF-aware injectable parameter verification, or conservative database fingerprinting and schema enumeration on authorized HTTP or HTTPS targets.
SOC 직업 분류 기준
| name | dirsearch-recon |
| description | Scoped web content discovery with the bundled dirsearch source tree. Use when the operator explicitly asks for dirsearch, directory enumeration, hidden file discovery, content brute forcing, or low-risk path discovery on authorized HTTP or HTTPS targets. |
| activation | auto |
| version | 1.0 |
| tags | ["recon","web","directory-enumeration"] |
| requires_tools | ["list_skill_scripts","run_skill_script"] |
| when_to_use | When the operator asks for directory enumeration, hidden file discovery, path brute forcing, or dirsearch-related tasks. |
Use this skill for conservative web path discovery on authorized targets.
list_skill_scripts(skill_name="dirsearch-recon") if you need to confirm the packaged script names.scripts/dirsearch_status.py first to confirm the vendored source tree and Python dependencies are ready.scripts/dirsearch_scan.py for actual scans.threads low.wordlist_categories before custom large wordlists.artifacts/.../dirsearch/ and summarize only evidence-backed paths.scripts/ directory is for deterministic helper logic. Use list_skill_scripts to inspect it.run_skill_script(skill_name="dirsearch-recon", script_name="dirsearch_scan.py", args_json='["--target","https://app.example.internal","--wordlist-categories","common,conf,web"]') is the preferred scan entrypoint.dirsearch_scan.py enforces scope, saves plain and JSON reports, and records a dirsearch-log.jsonl audit trail.dependency_check.required_available=false, install the missing packages into the repo environment before scanning.