From a664f36934882b2907ed5a88c5a9003c47dc6292 Mon Sep 17 00:00:00 2001 From: Tigah <88289044+TBX3D@users.noreply.github.com> Date: Wed, 22 Jul 2026 13:36:19 -0700 Subject: [PATCH] fix(modules): route module scans through the shared http transport (#318) module execution built a bare http client, so -proxy, -H, -cookie and -rate-limit applied to every other scanner but silently not to module scans. route through httpx.Client so modules share the configured transport like the rest of the run. Co-authored-by: vmfunc --- sif.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sif.go b/sif.go index 6b88188..61d2914 100644 --- a/sif.go +++ b/sif.go @@ -746,10 +746,14 @@ func (app *App) scanTarget(url, storeDir string, wantReport bool) (targetScan, e toRun = deduped // Execute modules + // Execute modules. Client routes through the shared httpx transport so + // -proxy/-H/-cookie/-rate-limit apply to module scans the same as every + // other scanner instead of each module dialing out on a bare client. opts := modules.Options{ Timeout: app.settings.Timeout, Threads: app.settings.Threads, LogDir: app.settings.LogDir, + Client: httpx.Client(app.settings.Timeout), } for _, m := range toRun {