domains / families / security / web-enumeration

web-enumeration

separate

Sensitive file scanning, path traversal bypass, vHost enum, .env extract, log mining, Varnish detect

When to use

• **ALWAYS** on every target -- first thing after port scan
• Success rate is high on neglected infrastructure
• One finding (.env, .git) often leads to full credential access

Skill page

Source