Skipfish Web Scanner

Scan web applications for vulnerabilities using skipfish.

Tool Status

• Tool installed: !command -v skipfish > /dev/null 2>&1 && echo "YES -- $(skipfish -h 2>&1 | head -1)" || echo "NO -- Install: sudo port install skipfish (macOS) | apt install skipfish (Debian/Ubuntu)"
• Wrapper scripts available: !test -f scripts/skipfish/quick-scan-web-app.sh && echo "YES -- use wrapper scripts for structured JSON output" || echo "NO -- using standalone mode with direct commands"

Mode: Wrapper Scripts Available

If wrapper scripts are available (shown as YES above), prefer these commands. They provide structured JSON output and educational context.

Quick Scanning

• bash scripts/skipfish/quick-scan-web-app.sh <target> -j -x -- Run a fast web application scan with default settings

Authenticated Scanning

• bash scripts/skipfish/scan-authenticated-app.sh <target> -j -x -- Scan web applications behind login pages using cookies or credentials