---
description: Scan target — fingerprint, exploit, verify vuln, collect loot
---
// turbo-all

> CONTEXT: Full scan workflow — dari fingerprint sampe exploit verification. WAJIB cari PoC terbaru sebelum attack.

# /scan — D1337 Target Scanner

## Prerequisites

- Target URL/IP dari Ketua/Abangda
- SecurityTrails API key (optional, buat enrichment)
- Recon data dari `/recon` (recommended)

---

## Step 1: Fingerprint Target

```bash
# HTTP headers
curl -sI "https://$TARGET" | head -20

# Tech detection
# search_web: "$TARGET technology stack"

# Port scan (kalau punya akses nmap)
# nmap -sV -sC -T4 $TARGET -oN scan_$TARGET.txt
```

## Step 2: CVE Research (WAJIB — JANGAN SKIP)

**Sebelum exploit apapun, CARI PoC TERBARU:**

```bash
# search_web: "$TECH_STACK CVE 2024 2025 PoC exploit"
# search_web: "$TECH_STACK vulnerability RCE POC github"
# search_web: "site:exploit-db.com $TECH_STACK"
# search_web: "site:github.com $TECH_STACK exploit"
```

**Prioritas CVE:**
1. RCE (Remote Code Execution) → **PALING PRIORITAS**
2. Auth Bypass → Privilege Escalation
3. SQLi → Data Exfiltration
4. SSRF → Internal Network Access
5. XSS → Session Hijacking
6. Info Disclosure → Intel Gathering

## Step 3: Exploit Validation

```bash
# Test PoC di target
# SELALU validate sebelum full exploit:
# - Cek version match
# - Cek apakah patched
# - Run PoC dengan safe mode dulu

# Kalau PoC dari GitHub:
# git clone $POC_REPO
# Baca README → pahami requirements → execute
```

## Step 4: Post-Exploit (Kalau Berhasil)

```bash
# 1. Capture evidence
# Screenshot, request/response logs

# 2. Enumerate access
# whoami, id, uname -a
# cat /etc/passwd (Linux)
# systeminfo (Windows)

# 3. Cek privilege escalation path
# Linux: linpeas.sh
# Windows: winpeas.exe

# 4. Document finding
```

## Step 5: Report

```markdown
# Scan Report: $TARGET

## Target Info
- URL: $TARGET
- IP: $IP
- Tech: $TECH_STACK
- Open Ports: $PORTS

## Vulnerabilities Exploited
| CVE | Type | PoC Used | Result |
|-----|------|----------|--------|
| ... | RCE  | [link]   | SUCCESS/FAIL |

## Evidence
[Screenshots, logs, request/response]

## Recommendations
[Kalau diminta — otherwise skip]
```

---

> **SCAN TANPA CVE RESEARCH = SCRIPT KIDDIE. Lu D1337 — RISET DULU, BARU TEMBAK.**