recon-dir-scan
recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection—all with built-in authorization safeguards to ensure proper testing scope.
recon-dir-scan discovers hidden directories and files using ffuf, gobuster, feroxbuster, and dirsearch for web application reconnaissance.
AI-generated summary based on this skill's SKILL.md
Install
crazyMarky/pentest-skills/recon-dir-scan · repository language: Python
git clone https://github.com/crazyMarky/pentest-skills
cp -r pentest-skills/recon-dir-scan ~/.claude/skills/recon-dir-scannpx skillfed install crazyMarky/pentest-skills/recon-dir-scanFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What does recon-dir-scan do?
recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection—all with built-in authorization safeguards to ensure proper testing scope.
Can recon-dir-scan find hidden directories on web apps?
Yes. recon-dir-scan discovers hidden directories and files on web applications by automating fuzzing against target paths. It uses multiple scanning tools and wordlist-based enumeration to uncover content that isn't linked from the main application, helping identify admin panels, backup files, and other sensitive resources.
How does recon-dir-scan enumerate API endpoints?
recon-dir-scan enumerates API endpoints and virtual hosts through path fuzzing and recursive scanning. It applies status code filtering to identify valid endpoints, allowing security testers to map application structure and discover both documented and undocumented API routes across different virtual hosts.
Can recon-dir-scan discover backup and config files?
Yes. recon-dir-scan finds backup, config, and sensitive files like .env, .bak, and exposed git folders. It uses fuzzing techniques to detect these resources and includes built-in authorization safeguards to ensure testing stays within proper scope and authorized boundaries.
What tools does recon-dir-scan support for directory scanning?
recon-dir-scan integrates multiple directory scanning tools including ffuf, gobuster, feroxbuster, and dirsearch. This multi-tool approach enables users to compare speed and feature coverage, choose recursive scanning options, and leverage different fuzzing strategies for comprehensive web path discovery and content enumeration.
Is recon-dir-scan suitable for mapping web application structure?
Yes. recon-dir-scan maps application structure through recursive path fuzzing and comprehensive directory enumeration. It discovers hidden admin pages, parameter fuzzing capabilities, and directory listing patterns, making it effective for thorough reconnaissance of web application architecture and identifying 403 forbidden paths.
SKILL.md
rendered from the published skill — quoted content, verbatim
Directory and File Enumeration
Authorization Warning
IMPORTANT: Directory scanning without proper authorization may be detected as intrusion attempts. Always ensure you have: - Written permission from the target application owner - Defined scope of authorized testing - Legal compliance with local regulations
Prerequisites
Required tools that must be installed on your system:
- ffuf - go install github.com/ffuf/ffuf@latest
- gobuster - go install github.com/OJ/gobuster/v3/cmd/gobusterdir@main
Optional tools:
- feroxbuster - cargo install feroxbuster
- dirsearch - pip install dirsearch
- dirb - Package manager installation
Quick Start
Most commonly used commands for directory enumeration:
Fast Directory Scan (ffuf)
ffuf -w wordlist.txt -u https://target.com/FUZZ
Recursive Scan with Status Codes
```bash ffuf -w wordlist.txt -u
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 12 files
recon-dir-scan/SKILL.md
recon-dir-scan/assets/api-endpoints.txt
recon-dir-scan/assets/common-dirs.txt
recon-dir-scan/assets/common-files.txt
recon-dir-scan/assets/hidden-files.txt
recon-dir-scan/references/ffuf_guide.md
recon-dir-scan/references/gobuster_guide.md
recon-dir-scan/references/wordlist_guide.md
recon-dir-scan/scripts/dir_scan_storage.py
recon-dir-scan/scripts/ffuf_results_parser.py
recon-dir-scan/scripts/merge_wordlists.py
recon-dir-scan/scripts/status_code_analyzer.py