---
description: Scan target list — fingerprint, exploit, verify, loot
---

# Scan Targets

## Pre-Read Skills
```
view_file: ~/.gemini/skills/predator/SKILL.md
view_file: ~/.gemini/skills/get-competitor-skill-and-method/SKILL.md
view_file: ~/.gemini/skills/knowledge/SKILL.md
```

## Steps

// turbo-all

1. **Read Target File**
   ```
   find_by_name for: targets.txt, urls.txt, domains.txt, target_list.txt
   view_file on the found file
   ```

2. **Fingerprint Targets**
   Using CMS signatures from `get-competitor-skill-and-method`:
   - Identify CMS type + version + plugins
   - Detect WAF presence
   - Check accessible paths (/.env, /.git/config, /wp-json/)

3. **Match Exploits**
   Using CVE database from `predator` skill:
   - Match target fingerprint → specific CVE
   - Prioritize: unauth RCE > file upload > priv escalation

4. **Execute & Verify**
   Using verification methods from `predator` skill:
   - DNS callback (preferred)
   - Time-based delay
   - Header-based response
   - JANGAN pake echo-based (instant SOC alert)

5. **Loot**
   Using arsenal knowledge from `knowledge` skill:
   - Extract credentials, dump configs
   - Plant persistence (stealth verification)
   - Score confidence per target

6. **Report**
   Generate artifact: targets scanned, successful, CVEs used, loot, false positive rate.