메뉴
Web path scanner for finding hidden directories and files. Use when you need to brute-force discover accessible paths, admin panels, backup files, or hidden endpoints on a web server.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | dirsearch |
| description | Web path scanner for finding hidden directories and files. Use when you need to brute-force discover accessible paths, admin panels, backup files, or hidden endpoints on a web server. |
| compatibility | Requires dirsearch to be installed on the system. |
| metadata | {"category":"reconnaissance","tool":"dirsearch"} |
Use this skill when the task involves:
Scan a single URL:
dirsearch -u <target>
Scan with specific extensions:
dirsearch -u <target> -e php,html,js,txt,bak
Use a custom wordlist:
dirsearch -u <target> -w /path/to/wordlist.txt
| Flag | Description |
|---|---|
-u <url> | Target URL |
-e <exts> | Extensions to scan (comma-separated) |
-w <file> | Custom wordlist |
-t <threads> | Number of threads |
-r | Follow redirects |
-x <codes> | Exclude status codes |
-o <file> | Output file |
--json-report | Output in JSON format |
Automated tool-assisted strategies for blind injection attacks (SQL, NoSQL, command, XPath). Covers when and how to use sqlmap, custom scripting, and binary search optimization to minimize token consumption and execution time. Use when manual blind injection would require >20 sequential requests.
HTTP Request Smuggling (HRS) / Desync attack detection and exploitation. Covers CL.TE, TE.CL, TE.TE detection, payload crafting, and chaining with SSRF/cache poisoning. Use when front-end/back-end architecture is suspected or when HTTP parsing discrepancies exist.
Race condition vulnerability detection and exploitation. Covers time-of-check to time-of-use (TOCTOU), limit bypass, coupon abuse, and multi-endpoint race chains. Use when state-dependent logic (credits, inventory, votes, transfers) exists or CTF challenge involves concurrent operations.
Canonical Nmap CLI syntax, strict staged scanning workflow, and sandbox-safe bounded scan patterns with timeout backoff.
Exact Nuclei command structure, template selection, staged scanning workflow, and bounded high-throughput execution controls with timeout backoff.
Common CTF exploitation patterns, quick wins, and time-saving tricks for web, crypto, pwn, and misc challenges. Use when you are stuck on a CTF challenge or want to rapidly test known patterns.