{"enrichment":{"faq":[{"a":"recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection\u2014all with built-in authorization safeguards to ensure proper testing scope.","q":"What does recon-dir-scan do?"},{"a":"Yes. recon-dir-scan discovers hidden directories and files on web applications by automating fuzzing against target paths. It uses multiple scanning tools and wordlist-based enumeration to uncover content that isn't linked from the main application, helping identify admin panels, backup files, and other sensitive resources.","q":"Can recon-dir-scan find hidden directories on web apps?"},{"a":"recon-dir-scan enumerates API endpoints and virtual hosts through path fuzzing and recursive scanning. It applies status code filtering to identify valid endpoints, allowing security testers to map application structure and discover both documented and undocumented API routes across different virtual hosts.","q":"How does recon-dir-scan enumerate API endpoints?"},{"a":"Yes. recon-dir-scan finds backup, config, and sensitive files like .env, .bak, and exposed git folders. It uses fuzzing techniques to detect these resources and includes built-in authorization safeguards to ensure testing stays within proper scope and authorized boundaries.","q":"Can recon-dir-scan discover backup and config files?"},{"a":"recon-dir-scan integrates multiple directory scanning tools including ffuf, gobuster, feroxbuster, and dirsearch. This multi-tool approach enables users to compare speed and feature coverage, choose recursive scanning options, and leverage different fuzzing strategies for comprehensive web path discovery and content enumeration.","q":"What tools does recon-dir-scan support for directory scanning?"},{"a":"Yes. recon-dir-scan maps application structure through recursive path fuzzing and comprehensive directory enumeration. It discovers hidden admin pages, parameter fuzzing capabilities, and directory listing patterns, making it effective for thorough reconnaissance of web application architecture and identifying 403 forbidden paths.","q":"Is recon-dir-scan suitable for mapping web application structure?"}],"shadow_tags":["path-discovery","fuzzing-automation","web-reconnaissance","endpoint-enumeration","application-mapping"],"summary_rewrite":"recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection\u2014all with built-in authorization safeguards to ensure proper testing scope."},"files":[{"bytes":10311,"path":"recon-dir-scan/SKILL.md","sha256":"27868235e91c89298df361721f3ea90e3c48382708a954dfba3aabd0eafe43fe","url":"https://skillfed.io/files/crazyMarky/pentest-skills/recon-dir-scan/9f6a4d40/SKILL.md"}],"id":"crazyMarky/pentest-skills/recon-dir-scan","links":{"html":"https://skillfed.io/crazyMarky/pentest-skills/recon-dir-scan","md":"https://skillfed.io/crazyMarky/pentest-skills/recon-dir-scan.md","repo":"https://github.com/crazyMarky/pentest-skills"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":28,"language":"Python","last_updated":"2026-06-04","license":"Apache-2.0","name":"recon-dir-scan","publisher":"crazyMarky","stars":259},"relations":{"similar":[{"id":"AgentSecOps/SecOpsAgentKit/dast-ffuf"},{"id":"jthack/ffuf_claude_skill/ffuf-skill"},{"id":"CommonHuman-Lab/nyxstrike/web-recon"},{"id":"yaklang/hack-skills/recon-and-methodology"},{"id":"trailofbits/skills-curated/ffuf-web-fuzzing"},{"id":"crazyMarky/pentest-skills/exploit-file-download"},{"id":"Aradotso/security-skills/pentest-skills-framework"},{"id":"blacklanternsecurity/red-run/web-discovery"},{"id":"zebbern/claude-code-guide/red-team-tools"},{"id":"crazyMarky/pentest-skills/exploit-lfi"}]},"slug":{"owner":"crazyMarky","repo":"pentest-skills","skill":"recon-dir-scan"},"version":"9f6a4d40"}