recon-dir-scan
recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection—all with built-in authorization safeguards to ensure proper testing scope.
recon-dir-scan discovers hidden directories and files using ffuf, gobuster, feroxbuster, and dirsearch for web application reconnaissance.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-06-04
recon-dir-scan discovers hidden directories and files using ffuf, gobuster, feroxbuster, and dirsearch for web application reconnaissance. recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection—all with built-in authorization safeguards to ensure proper testing scope.
Use it when
- Yes.
- recon-dir-scan enumerates API endpoints and virtual hosts through path fuzzing and recursive scanning.
Verify before relying
Read SKILL.md below before installing (12 files). Open directory: indexed for reading, not audited.
Install
crazyMarky/pentest-skills/recon-dir-scan · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What does recon-dir-scan do?
recon-dir-scan automates directory and file discovery across web applications through multiple fuzzing tools. It supports recursive scanning, status code filtering, virtual host enumeration, API endpoint discovery, and hidden file detection—all with built-in authorization safeguards to ensure proper testing scope.
Can recon-dir-scan find hidden directories on web apps?
Yes. recon-dir-scan discovers hidden directories and files on web applications by automating fuzzing against target paths. It uses multiple scanning tools and wordlist-based enumeration to uncover content that isn't linked from the main application, helping identify admin panels, backup files, and other sensitive resources.
How does recon-dir-scan enumerate API endpoints?
recon-dir-scan enumerates API endpoints and virtual hosts through path fuzzing and recursive scanning. It applies status code filtering to identify valid endpoints, allowing security testers to map application structure and discover both documented and undocumented API routes across different virtual hosts.
Can recon-dir-scan discover backup and config files?
Yes. recon-dir-scan finds backup, config, and sensitive files like .env, .bak, and exposed git folders. It uses fuzzing techniques to detect these resources and includes built-in authorization safeguards to ensure testing stays within proper scope and authorized boundaries.
What tools does recon-dir-scan support for directory scanning?
recon-dir-scan integrates multiple directory scanning tools including ffuf, gobuster, feroxbuster, and dirsearch. This multi-tool approach enables users to compare speed and feature coverage, choose recursive scanning options, and leverage different fuzzing strategies for comprehensive web path discovery and content enumeration.
Is recon-dir-scan suitable for mapping web application structure?
Yes. recon-dir-scan maps application structure through recursive path fuzzing and comprehensive directory enumeration. It discovers hidden admin pages, parameter fuzzing capabilities, and directory listing patterns, making it effective for thorough reconnaissance of web application architecture and identifying 403 forbidden paths.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Directory and File Enumeration
Authorization Warning
IMPORTANT: Directory scanning without proper authorization may be detected as intrusion attempts. Always ensure you have: - Written permission from the target application owner - Defined scope of authorized testing - Legal compliance with local regulations
Prerequisites
Required tools that must be installed on your system:
- ffuf - go install github.com/ffuf/ffuf@latest
- gobuster - go install github.com/OJ/gobuster/v3/cmd/gobusterdir@main
Optional tools:
- feroxbuster - cargo install feroxbuster
- dirsearch - pip install dirsearch
- dirb - Package manager installation
Quick Start
Most commonly used commands for directory enumeration:
Fast Directory Scan (ffuf)
ffuf -w wordlist.txt -u https://target.com/FUZZ
Recursive Scan with Status Codes
```bash ffuf -w wordlist.txt -u
(truncated - see the full file via the links below)
File tree — 12 files
recon-dir-scan/SKILL.md
recon-dir-scan/assets/api-endpoints.txt
recon-dir-scan/assets/common-dirs.txt
recon-dir-scan/assets/common-files.txt
recon-dir-scan/assets/hidden-files.txt
recon-dir-scan/references/ffuf_guide.md
recon-dir-scan/references/gobuster_guide.md
recon-dir-scan/references/wordlist_guide.md
recon-dir-scan/scripts/dir_scan_storage.py
recon-dir-scan/scripts/ffuf_results_parser.py
recon-dir-scan/scripts/merge_wordlists.py
recon-dir-scan/scripts/status_code_analyzer.py
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Discover hidden directories and files on web applications”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Web Recon automates reconnaissance workflows for identifying hidden web content, detecting technology stacks, and discovering virtual hosts. It orchestrates multiple specialized tools—from WAF detection and HTTP probing to recursive directory scanning and application crawling—to build a comprehensive picture of web targets.
Pentest Skills Framework is a modular penetration testing system designed for AI coding agents that translates natural language requests into security testing workflows. It provides atomic-level capabilities for port scanning, subdomain enumeration, SQL injection testing, XSS detection, and directory scanning, bundling automation scripts and reference documentation for each testing domain.
recon-port-scan enables port discovery and service identification across target hosts using industry-standard tools. Execute fast common-port scans, comprehensive port-range sweeps, service version detection, stealth scanning, UDP discovery, OS fingerprinting, and high-speed mass scanning workflows.
scrapling enables automated data extraction from sites defended by Cloudflare and similar anti-scraping systems. It uses sophisticated evasion methods to bypass protection layers and retrieve content that would otherwise be inaccessible to standard scrapers. Ideal for researchers and developers who need reliable access to protected web data.
file-operations covers essential Linux file system tasks: searching by name, type, size, or modification time; performing batch operations like rename and delete; and managing permissions and ownership. It includes practical scenarios for cleanup, finding recent changes, and bulk content replacement.
This skill wraps yt-dlp to fetch videos from YouTube and over 1000 other platforms, with options for quality selection, audio extraction, subtitle capture, and playlist downloads. It preserves metadata and thumbnails while supporting resume on interrupted transfers.