🎁 Get the FREE AI Skills Starter Guide β€” Subscribe β†’
BytesAgainBytesAgain
BytesAgain β€Ί Skills β€Ί fofamap
πŸ¦€ ClawHub

fofamap

by @asaotomo

Use this skill when the user wants FOFA-based asset discovery, host profiling, distribution statistics, icon_hash generation, query refinement after zero-res...

Versionv1.0.1
#crypto#clawhub
⚑ When to Use
TriggerAction
- find exposed assets, subdomains, services, or product fingerprints with FOFA
- profile a single IP or domain with FOFA host aggregation
- analyze distribution data such as country, port, title, ASN, or organization rankings
- run recurring asset monitoring and compare new, removed, or changed exposures
- derive an `icon_hash` query from a target website
- retry a failed FOFA search with broader, smarter fallback queries
- decide whether the findings justify a separate validation step such as `nuclei`
Do not use this skill for:
- general web scraping unrelated to FOFA
- active exploitation by default
- network scanning without explicit user approval
- tasks that require guaranteed real-time validation beyond FOFA's indexed data
πŸ’‘ Examples

If credentials are not configured yet, read references/setup.md.

Required credentials for this skill:

  • FOFA email
  • FOFA API key

    • Core helper:

  • scripts/fofa_recon.py login
  • scripts/fofa_recon.py search --query 'app="nginx" && country="US"'
  • scripts/fofa_recon.py search --query 'app="nginx" && country="US"' --alive-check --output nginx_us.xlsx
  • scripts/fofa_recon.py search-next --query 'title="login"' --fields host,ip,port,title --max-pages 3
  • scripts/fofa_recon.py search-next --query 'app="nginx"' --size 100 --max-pages 2 --output nginx_deep.xlsx
  • scripts/fofa_recon.py search --query 'cert.subject.org="Google"' --fields ip,port,product,product.version,cert.is_valid
  • scripts/fofa_recon.py host --target 8.8.8.8
  • scripts/fofa_recon.py host --target 8.8.8.8 --report-output host_report.md
  • scripts/fofa_recon.py stats --query 'app="Redis"' --fields country,port,org
  • scripts/fofa_recon.py stats --query 'app="Redis"' --fields country,port,org --report-output stats_report.md
  • scripts/fofa_recon.py alive-check --target example.com --target 1.1.1.1:8443 --output alive.csv
  • scripts/fofa_recon.py monitor-run --query 'org="Example Corp"' --state-dir results/monitor_example --report-output results/monitor_example/latest_report.md
  • scripts/fofa_recon.py monitor-run --query-file queries.txt --use-search-next --max-pages 3 --state-dir results/monitor_monthly --fail-on-change
  • scripts/fofa_recon.py project-run --query 'app="nginx" && country="US"' --query 'app="grafana" && country="US"' --alive-check --split-exports
  • scripts/fofa_recon.py learn-review
  • scripts/fofa_recon.py icon-hash --url https://example.com

    • View on ClawHub
    TERMINAL
    clawhub install fofamap

    πŸ§ͺ Use this skill with your agent

    Most visitors already have an agent. Pick your environment, install or copy the workflow, then run the smoke-test prompt above.

    Manus
    Task-oriented agent. Great for testing AI skills end-to-end.
    Try Manus β†’
    OpenClaw
    Local-first agent. Install skills via ClawHub CLI.
    Set up OpenClaw β†’
    Claude Code
    Anthropic's coding agent. Paste the prompt or SKILL.md into your session.
    Claude Code docs β†’
    Cursor
    AI-powered IDE. Use the smoke-test prompt in Cursor Agent.
    Open Cursor β†’
    Continue.dev
    Open-source AI code assistant. Add SKILL.md as a custom tool.
    Continue docs β†’
    Windsurf
    Agentic IDE by Codeium. Paste the prompt into Cascade.
    Try Windsurf β†’
    Cline
    VS Code extension for autonomous coding with MCP tools.
    Cline on GitHub β†’
    Copilot Workspace
    GitHub's AI dev environment. Suitable for code-generation skills.
    Copilot Workspace β†’

    πŸ” Can't find the right skill?

    Search 60,000+ AI agent skills β€” free, no login needed.

    Search Skills β†’