ctf-recon

What problem does it solve?

Target reconnaissance and enumeration for CTF challenges can be time-consuming and error-prone. This Skill provides ready-to-run commands and patterns to quickly identify open ports, services, web directories, and technology stacks.

Core Features & Use Cases

• Network reconnaissance: port scanning, service fingerprinting, and banner grabbing.
• Web reconnaissance: directory discovery, robots.txt, sitemap.xml, and technology fingerprinting.
• API and GraphQL discovery: identify common endpoints, docs patterns, and versioning.
• Use case: when facing a new CTF target, run this Skill to map the attack surface and plan next steps.

Quick Start

Follow the steps below to start reconnaissance on a target:

1. Scan for ports and services: nmap -sV -T4 target
2. Enumerate web content and tech: curl -sI http://target/; gobuster dir -u http://target/ -w wordlist.txt
3. Check APIs and endpoints: for p in api api/v1 api/v2; do curl -s -o /dev/null -w "%{http_code}" "http://target/$p"; done