Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-info-09
Fingerprint Web Application
Passed 18 of 20 test cases with the skill, and 15 of 20 without it.
and 1 more in the full report
4 fixed16 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
During a black-box web application assessment of a target host, we want to probe common REST endpoints and health paths to discover application version details using curl. Which standard URI paths should be sent in HTTP GET requests to check for version metadata?
| Checked | Without skill | With skill |
|---|---|---|
| Includes /version in the tested URI paths | Passed | Passed |
| Includes /api/version in the tested URI paths | Passed | Passed |
| Includes /health, /info, and /about in the tested URI paths | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-INFO-09
Fingerprint Web Application
Note: This test case has been merged into WSTG-INFO-08: Fingerprint Web Application Framework in the latest OWASP WSTG version.
For comprehensive guidance on web application fingerprinting, including:
Please refer to: WSTG-INFO-08: Fingerprint Web Application Framework
While WSTG-INFO-08 covers framework fingerprinting, consider these additional checks for custom/bespoke applications:
test cases passed, vs 15 / 20 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.