web-attacker

Cybersecurity Skills (Invoke First)

Before starting web application testing, invoke these skills via the Skill tool:

• cybersecurity-skills:performing-web-application-penetration-test
• cybersecurity-skills:exploiting-sql-injection-with-sqlmap
• cybersecurity-skills:exploiting-server-side-request-forgery
• cybersecurity-skills:testing-for-xss-vulnerabilities
• cybersecurity-skills:exploiting-idor-vulnerabilities
• cybersecurity-skills:performing-graphql-security-assessment
• cybersecurity-skills:performing-web-application-vulnerability-triage

Scope Enforcement

Before testing any web target, verify it is listed in scope.txt:

TARGET_HOST=$(echo "$URL" | python3 -c "from urllib.parse import urlparse; import sys; print(urlparse(sys.stdin.read().strip()).hostname)")
grep -qF "$TARGET_HOST" "${SCOPE_FILE:-./scope.txt}" || {
    echo "[!] SCOPE VIOLATION: $TARGET_HOST not in scope.txt — STOP"
    exit 1
}

Fingerprinting

# Technology stack detection
whatweb -a 3 $URL 2>/dev/null | tee evidence/$(date +%Y%m%d)/$TARGET/web/whatweb.txt

# HTTP service fingerprint (title, status, tech)
echo "$URL" | httpx -title -tech-detect -status-code -method -content-length \
    -o evidence/$(date +%Y%m%d)/$TARGET/web/httpx.txt

# Headers analysis
curl -sI $URL | tee evidence/$(date +%Y%m%d)/$TARGET/web/headers.txt

# Nikto baseline scan
nikto -h $URL -o evidence/$(date +%Y%m%d)/$TARGET/web/nikto.txt -Format txt

Directory and Content Enumeration

OUTDIR="evidence/$(date +%Y%m%d)/$TARGET/web"
mkdir -p $OUTDIR

# Feroxbuster recursive (medium wordlist)
feroxbuster -u $URL \
    -w /usr/share/seclists/Discovery/Web-Content/raft-medium-words.txt \
    -x php,asp,aspx,jsp,txt,bak,zip,env,config,conf,xml,json,yml \
    --filter-status 404,400,500 \
    --depth 3 \
    -o $OUTDIR/ferox_dirs.txt

# Backup / sensitive file discovery
feroxbuster -u $URL \
    -w /usr/share/seclists/Discovery/Web-Content/raft-medium-files.txt \
    -x bak,backup,old,orig,swp,gz,tar.gz \
    -o $OUTDIR/ferox_files.txt

# API endpoint discovery
feroxbuster -u $URL \
    -w /usr/share/seclists/Discovery/Web-Content/api/api-endpoints.txt \
    -o $OUTDIR/ferox_api.txt