deep-invade

1# Deep Invade Skill
2 
3Focused follow-up methodology for WordPress targets prioritized by
4`wp-mass-recon`. It connects XML-RPC SSRF validation, exposed-log analysis,
5plugin version review, JavaScript inspection, staging discovery, service
6mapping, and API enumeration.
7 
8## When to Use
9 
10- `wp-mass-recon` scored a target >= 6 (CORS confirmed, XMLRPC open, source leaks found).
11- You are assigned a single high-value target for deep assessment.
12- After surface recon, you need to find the chain that leads to RCE or data breach.
13- Multiple independent signals justify a deeper, target-specific follow-up.
14 
15## Prerequisites
16 
17- `curl`, `python3`, and the tools required by each selected phase.
18- Target already scored >= 6 from wp-mass-recon (WordPress confirmed, at least 2 of: CORS/XMLRPC/source leak).
19- Collaborator endpoint (Burp Collaborator, interactsh, or your own server) for SSRF/blind confirmation.
20- `nmap` available when port scanning is in scope.
21 
22## How to Run
23 
24Execute probes in order. Each phase builds on the previous:
25 
261. Extended SSRF probe (XMLRPC pingback to IMDS, localhost, internal IPs)
272. Error log mining (fetch and grep for creds, paths, SQL)
283. Plugin CVE matrix (30+ REST namespaces, readme.txt versions)
294. JavaScript bundle analysis (11 regex patterns for secrets)
305. Subdomain/staging enumeration (crt.sh, httpx, WP install pages)
316. Port scan (nmap -F for MySQL, FTP, SSH, internal APIs)
327. API discovery (Swagger, GraphQL, WooCommerce, Gravity Forms)
33 
34## Quick Reference
35…