diff --git a/.github/workflows/header-check.yml b/.github/workflows/header-check.yml
new file mode 100644
index 0000000..e3bb0f1
--- /dev/null
+++ b/.github/workflows/header-check.yml
@@ -0,0 +1,52 @@
+name: header check
+
+on:
+ push:
+ paths:
+ - '**.go'
+ pull_request:
+ paths:
+ - '**.go'
+
+jobs:
+ check-headers:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+
+ - name: check license headers
+ run: |
+ missing_headers=()
+
+ while IFS= read -r -d '' file; do
+ # skip test files and generated files
+ if [[ "$file" == *"_test.go" ]]; then
+ continue
+ fi
+
+ # check if file starts with the license header
+ if ! head -n 3 "$file" | grep -q "█▀ █ █▀▀"; then
+ missing_headers+=("$file")
+ fi
+ done < <(find . -name "*.go" -type f -print0)
+
+ if [ ${#missing_headers[@]} -ne 0 ]; then
+ echo "::error::the following files are missing the license header:"
+ printf '%s\n' "${missing_headers[@]}"
+ echo ""
+ echo "expected header format:"
+ echo '/*'
+ echo '·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·'
+ echo ': :'
+ echo ': █▀ █ █▀▀ · Blazing-fast pentesting suite :'
+ echo ': ▄█ █ █▀ · BSD 3-Clause License :'
+ echo ': :'
+ echo ': (c) 2022-2025 vmfunc (Celeste Hickenlooper), xyzeva, :'
+ echo ': lunchcat alumni & contributors :'
+ echo ': :'
+ echo '·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·'
+ echo '*/'
+ exit 1
+ fi
+
+ echo "all go files have proper license headers"
diff --git a/LICENSE b/LICENSE
index 8a75bb1..d59dad6 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,11 +1,29 @@
-Copyright 2023 - 2024 lunchcat, inc. ALL RIGHTS RESERVED.
+BSD 3-Clause License
-Use of this tool is restricted to research and educational purposes only. Usage in a production environment outside of these categories is strictly prohibited. Any person or entity wishing to use this tool outside of research or school purposes must purchase a license from https://lunchcat.dev.
+Copyright (c) 2022-2025 vmfunc (Celeste Hickenlooper), xyzeva, lunchcat alumni,
+and other sif contributors.
-For Businesses:
-1. Licensing Requirement: Businesses intending to use this tool for any commercial, operational, or production purposes must obtain a commercial license from [lunchcat.dev](https://lunchcat.dev).
-2. Compliance: Businesses must ensure compliance with all applicable laws and regulations when using this tool.
-3. Liability: lunchcat assumes no liability for any damages or losses incurred by businesses using this tool without an appropriate license.
-4. Support: Licensed business users are eligible for dedicated support and updates as per the terms of their license agreement.
-5. Audits: lunchcat reserves the right to audit business usage of this tool to ensure compliance with the licensing terms.
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+1. Redistributions of source code must retain the above copyright notice, this
+ list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+ this list of conditions and the following disclaimer in the documentation
+ and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+ contributors may be used to endorse or promote products derived from
+ this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/README.md b/README.md
index 55c9f66..9073295 100644
--- a/README.md
+++ b/README.md
@@ -1,124 +1,105 @@
-
-[](https://goreportcard.com/report/github.com/dropalldatabases/sif)
-[](https://github.com/dropalldatabases/sif/tags)
+```
+·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·
+: :
+: █▀ █ █▀▀ :
+: ▄█ █ █▀ blazing-fast pentesting suite :
+: :
+·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·
+```
+
+[](https://go.dev/)
+[](https://github.com/dropalldatabases/sif/actions)
+[](LICENSE)
+
+**[install](#install) · [usage](#usage) · [modules](#modules) · [contribute](#contribute)**
-## 📖 Table of Contents
+---
-- [Modules](#-modules)
-- [Installation](#-installation)
-- [Quick Start](#-quick-start)
-- [Usage](#-usage)
-- [Performance](#-performance)
-- [Contributing](#-contributing)
-- [Contributors](#-contributors)
-- [Acknowledgements](#-acknowledgements)
+## what is sif?
-## 🧩 Modules
+sif is a modular pentesting toolkit written in go. it's designed to be fast, concurrent, and extensible. run multiple scan types against targets with a single command.
-sif is built with a modular architecture, allowing for easy extension and customization. Some of our key modules include:
-
-- 📂 Directory/file fuzzing/scanning
-- 📡 DNS subdomain enumeration
-- 🐾 Common Web scanning
-- 🖥️ Port/service scanning
-- 🦠 Vulnerability scanning
- - Support for pre-existing nuclei templates
- - Metasploit emulation for execution
-- 🔎 Automated Google dorking
-- 💘 Shodan integration
-- 📦 CMS detection
-- 🔍 HTTP Header Analysis
-- ☁️ C3 Misconfiguration Scanner
-- 🔍 Subdomain Takeover Checks
-
-## 📦 Installation
-
-### Using pre-built binaries
-
-Visit our [Releases](https://github.com/dropalldatabases/sif/releases) page to download the latest pre-built binary for your operating system.
-
-### Building from source
-
-1. Ensure you have Go 1.23+ installed on your system.
-2. Clone the repository:
- ```
- git clone https://github.com/lunchcat/sif.git
- cd sif
- ```
-3. Build using the Makefile:
- ```
- make
- ```
-4. The binary will be available in the root directory.
-
-## 🚀 Quick Start
-
-1. Run a basic scan:
- ```
- ./sif -u example.com
- ```
-2. For more options and advanced usage, refer to the help command:
- ```
- ./sif -h
- ```
-
-## 🛠 Usage
-
-sif offers a wide range of commands and options to customize your pentesting workflow. Here are some common usage examples:
-
-- Directory fuzzing
-
-```
-./sif -u http://example.com -dirlist medium
+```bash
+./sif -u https://example.com -all
```
-- Subdomain enumeration
+## install
-```
-./sif -u http://example.com -dnslist medium
+### from releases
+
+grab the latest binary from [releases](https://github.com/dropalldatabases/sif/releases).
+
+### from source
+
+```bash
+git clone https://github.com/dropalldatabases/sif.git
+cd sif
+make
```
-- Supabase/Firebase and C3 Vulnerability scanning
+requires go 1.23+
-```
-./sif -u https://example.com -js -c3
-```
+## usage
-- Port scanning
+```bash
+# basic scan
+./sif -u https://example.com
-```
+# directory fuzzing
+./sif -u https://example.com -dirlist medium
+
+# subdomain enumeration
+./sif -u https://example.com -dnslist medium
+
+# port scanning
./sif -u https://example.com -ports common
+
+# javascript framework detection + cloud misconfig
+./sif -u https://example.com -js -c3
+
+# everything
+./sif -u https://example.com -all
```
-For a complete list of commands and options, run `./sif -h`.
+run `./sif -h` for all options.
-## ⚡ Performance
+## modules
-sif is designed for high performance and efficiency:
+| module | description |
+|--------|-------------|
+| `dirlist` | directory and file fuzzing |
+| `dnslist` | subdomain enumeration |
+| `ports` | port and service scanning |
+| `nuclei` | vulnerability scanning with nuclei templates |
+| `dork` | automated google dorking |
+| `js` | javascript framework detection (next.js, supabase) |
+| `c3` | cloud storage misconfiguration scanning |
+| `headers` | http header analysis |
+| `takeover` | subdomain takeover detection |
+| `cms` | cms detection |
+| `whois` | whois lookups |
+| `git` | exposed git repository detection |
-- Written in Go for excellent concurrency and speed
-- Optimized algorithms for minimal resource usage
-- Supports multi-threading for faster scans
-- Efficient caching mechanisms to reduce redundant operations
+## contribute
-## 🤝 Contributing
+contributions welcome. see [contributing.md](CONTRIBUTING.md) for guidelines.
-We welcome contributions from the community! Please read our [Contributing Guidelines](CONTRIBUTING.md) before submitting a pull request.
+```bash
+# format
+gofmt -w .
-Areas we're particularly interested in:
+# lint
+golangci-lint run
-- New scanning modules
-- Performance improvements
-- Documentation enhancements
-- Bug fixes and error handling improvements
+# test
+go test ./...
+```
-## 🌟 Contributors
-
-Thanks to these wonderful people who have contributed to sif:
+## contributors
@@ -141,19 +122,13 @@ Thanks to these wonderful people who have contributed to sif:
-## 🙏 Acknowledgements
+## acknowledgements
-We'd like to thank the following projects and communities for their inspiration and support:
-
-- [ProjectDiscovery](https://projectdiscovery.io/) for their amazing open-source security tools
-- [Shodan](https://www.shodan.io/)
-- [Malcore](https://www.malcore.io/), for providing us direct API support at Lunchcat.
+- [projectdiscovery](https://projectdiscovery.io/) for nuclei and other security tools
+- [shodan](https://www.shodan.io/) for infrastructure intelligence
---
-
Happy Hunting! 🐾
-
- Built with ❤️ by the lunchcat team and contributors worldwide
-
+
bsd 3-clause license · made by vmfunc, xyzeva, and contributors