菜单
Use gobuster for authorized directory, DNS, and virtual-host enumeration with bounded wordlists.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Use agent-browser-cli to perceive and control the supervised Chrome browser inside the sandbox, interact with pages, capture screenshots/PDFs, inspect cookies/CDP/network/console state, and troubleshoot only when needed.
Use OWASP Amass for authorized asset discovery, domain enumeration, and DNS intelligence on in-scope targets.
Use apktool for authorized Android APK resource decoding, manifest review, smali inspection, rebuild checks, and static mobile artifact triage.
Use file, 7z, unzip, tar-compatible tools, hashes, and bounded shell inspection for safe triage of provided archives and unknown files.
Use binwalk for authorized firmware, binary blob, archive, filesystem, and embedded-content triage with bounded extraction and evidence handling.
Use the pwntools-provided checksec CLI for authorized ELF hardening review, mitigation checks, and binary triage evidence.
| name | gobuster |
| description | Use gobuster for authorized directory, DNS, and virtual-host enumeration with bounded wordlists. |
Use gobuster for authorized directory, DNS, and virtual-host enumeration when a focused wordlist-driven run is appropriate.
Before constructing commands, run the installed help and mode help as needed:
gobuster help
gobuster dir --help
gobuster dns --help
gobuster vhost --help
/usr/share/seclists unless the user approves a broader run.gobuster for simple mode-specific directory, DNS, or virtual-host enumeration; use ffuf when the fuzz position or output format needs more flexibility.Directory discovery:
find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f | sort | sed -n '1,40p'
wordlist="$(find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f -iname '*small*' | sort | sed -n '1p')"
test -n "$wordlist"
test -f "$wordlist"
gobuster dir -u https://example.com/ -w "$wordlist" -t 20 --timeout 10s -o gobuster-dir.txt
DNS subdomain enumeration:
find /usr/share/seclists/Discovery/DNS -maxdepth 2 -type f | sort | sed -n '1,40p'
wordlist="$(find /usr/share/seclists/Discovery/DNS -maxdepth 2 -type f -iname '*subdomain*' | sort | sed -n '1p')"
test -n "$wordlist"
test -f "$wordlist"
gobuster dns -d example.com -w "$wordlist" -t 20 -o gobuster-dns.txt
Virtual host enumeration:
gobuster vhost -u https://example.com/ -w vhosts.txt -t 20 -o gobuster-vhost.txt
Use vhosts.txt for full virtual hostnames when the installed help does not show domain-append behavior. Use mode-specific help before adding filters such as status codes, extensions, or TLS behavior.
Report mode, target scope, command used, wordlist path, filters, output path, and validated results.