Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-info-04
Enumerate Applications on Webserver
Passed 17 of 22 test cases with the skill, and 14 of 22 without it.
3 fixed14 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
We need a one-line bash pipeline that combines passive subdomain enumeration with amass, HTTP probing with httpx, and screenshot capture with aquatone. How should these three tools be chained together?
| Checked | Without skill | With skill |
|---|---|---|
| Executes amass enum with -passive flag | Passed | Passed |
| Pipes output to httpx | Passed | Passed |
| Pipes live hosts to aquatone with -out screenshots/ option | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-INFO-04
Enumerate Applications on Webserver
A single web server can host multiple web applications accessible through different URLs, ports, or virtual hosts. This test aims to comprehensively discover all web applications running on the target infrastructure. Missing applications during enumeration can result in overlooking critical vulnerabilities. Applications may be hidden at non-standard URL paths, running on unusual ports, or accessible only through specific hostnames (virtual hosting).
test cases passed, vs 14 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.