Skipfish

High-speed active web recon scanner.

KaliParrothigh

pkg: skipfish

Skipfish crawls and probes web apps at high speed, producing an interactive sitemap with issues.

Syntax

skipfish -o {out} {url}

Example

skipfish -o report https://example.com

Crawls the site and writes an HTML findings report to report/.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-o <report>Output directory (required).
-S <words.txt>Use a supplementary wordlist.
-W <wl.txt>Read/write the keyword wordlist.
-d <4>Max crawl depth.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

skipfish

Usage examples

skipfish -o report https://target.tld

Crawl + probe, writing an HTML report.

Advantages
  • Very fast crawling
  • Detailed sitemap
Disadvantages
  • Extremely noisy/heavy
  • Dated checks
Tags
#web#scanner

Official docs: Skipfish

Related commands

Frequently asked questions

What is Skipfish used for?
Skipfish crawls and probes web apps at high speed, producing an interactive sitemap with issues.
What is an example Skipfish command?
A common example is: skipfish -o report https://example.com — Crawls the site and writes an HTML findings report to report/.
Is Skipfish part of Kali Linux?
Yes. Skipfish ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install skipfish.
What category of security tool is Skipfish?
Skipfish is a Vulnerability Analysis tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →