vmfunc
495d2c5496
feat: add securitytrails integration for domain discovery + target expansion
2026-02-17 13:38:07 +01:00
vmfunc
75da3e3131
fix: resolve all golangci-lint issues across codebase
...
- noctx: use http.NewRequestWithContext instead of http.Get/client.Get
- bodyclose: close response bodies on all code paths
- httpNoBody: use http.NoBody instead of nil for GET request bodies
- ifElseChain: convert if/else chains to switch in sif.go
- sloppyReassign: use := in logger.go where possible
- nilnil: annotate intentional nil,nil returns in lfi.go, sql.go
- errcheck: handle template install error in nuclei.go
- govet copylock: pass mutex by pointer in executor.go
- log.Fatalf: replace with log.Errorf+continue in api mode
2026-02-13 02:11:17 +01:00
vmfunc
bad5b598c9
test: add fuzz tests for LFI detection, SQL patterns, version parsing
...
fuzz targets: DetectLFIFromResponse, isAdminPanel, databaseErrorPatterns,
isValidVersionString, ExtractVersionOptimized - should bump the scorecard
fuzzing check.
Signed-off-by: vmfunc <celeste@linux.com >
2026-02-13 01:57:46 +01:00
vmfunc
03a9488b65
internal/scan: migrate nuclei integration to v3 SDK
...
replace ~100 lines of manual nuclei v2 plumbing (catalog, loader, core,
protocolstate, protocolinit, hosterrorscache, interactsh, reporting,
ratelimit, testutils) with the v3 lib SDK - NewNucleiEngineCtx +
functional options.
drops direct ratelimit dep, mholt/archiver and nwaples/rardecode
(resolves dependabot CVE alerts for path traversal + DoS).
Signed-off-by: vmfunc <celeste@linux.com >
2026-02-13 01:22:25 +01:00
vmfunc
f50f1b933a
Merge branch 'main' into feat/builtin-shodan
2026-02-08 19:22:32 +01:00
vmfunc
6f460425be
Merge pull request #63 from 0x4bs3nt/feat/builtin-whois
...
feat(modules): builtin whois scan as module
2026-02-08 14:12:27 +01:00
vmfunc
16ea9047f0
Merge branch 'main' into feat/builtin-frameworks
2026-01-12 11:22:56 +01:00
vmfunc
39bd115d3c
Merge branch 'main' into feat/builtin-shodan
2026-01-12 11:22:36 +01:00
vmfunc
ccf093b7e9
fix: rename to snakecase
2026-01-12 11:19:54 +01:00
vmfunc
b5398ec687
fix: renamed whois module file
...
Renamed whois scan module file to differentiate from legacy whois scan
file.
2026-01-12 11:19:54 +01:00
vmfunc
b298e2ec2c
fix(conflicts): fix PR conflicts on
2026-01-12 11:19:48 +01:00
vmfunc
95cebab47f
fix: rename to snakecase
2026-01-07 22:39:56 +01:00
vmfunc
579f5aff4b
fix: rename to snakecase
2026-01-07 22:39:35 +01:00
vmfunc
6df46b635a
fix: rename to snakecase
2026-01-07 22:39:19 +01:00
vmfunc
4a6364aba9
fix: shodan module file rename
...
Renamed shodan module file to differentiate from legacy shodan lookup
files.
2026-01-07 22:35:51 +01:00
vmfunc
e7db0777c2
fix: frameworks module file rename
...
Renamed frameworks module file to differentiate from legacy framework
scans.
2026-01-07 22:34:53 +01:00
vmfunc
9767a6b189
fix: renamed nuclei module file
...
Renamed the nuclei module file to differentiate from the nuclei legacy
scan file.
2026-01-07 22:33:49 +01:00
vmfunc
abb992aefd
fix: colorizer exception
...
Fixed Nuclei giving off exception for missing Colorizer on the executor
options.
2026-01-07 19:06:51 +01:00
vmfunc
3c160de165
fix(nuclei): logdir, headless option and hosterrorscache
...
Set the HostErrorsCache executor option, cache is created but not passed
as option.
Headless initialization is required even without browser templates.
Nuclei expects project file to be set
2026-01-07 17:01:22 +01:00
vmfunc
66a752d604
fix: nuclei scan nil pointer dereference
...
Fixed nil pointer dereference issues in the nuclei scan running as a
module
2026-01-07 15:09:49 +01:00
vmfunc
45f341c97f
feat(modules): legacy nuclei scan
...
Converted nuclei scan to be able to run as module.
2026-01-07 13:07:35 +01:00
vmfunc
0383c49bbd
feat(modules): legacy shodan scan
...
Converted legacy Go shodan scan to be able to run as module.
2026-01-07 13:05:08 +01:00
vmfunc
e5e831541f
feat(modules): legacy framework scan
...
Converted legacy framework scan to be able to run as module.
2026-01-07 13:02:40 +01:00
vmfunc
f309198f69
feat(modules): infra for builtin modules
...
Infrastructure preparation for builtin complex Go module registration.
2026-01-07 12:56:17 +01:00
vmfunc
75014e244b
fix: adjust generator meta weight
...
Adjusted generator meta weight to remain consistent with other meta-framework detectors.
Co-authored-by: vmfunc <celeste@router.sex >
2026-01-06 14:45:03 +01:00
vmfunc
ee1f9d7f31
feat(frameworks): add Astro framework detection
...
Add detection support for the Astro meta framework.
Includes signature detection, version extraction and tests with full
signature coverage.
2026-01-06 04:40:15 +01:00
vmfunc
7268374333
chore: add license headers to missing files
2026-01-03 06:01:00 -08:00
vmfunc
00a66adf27
feat(output): add styled console output with module loggers
...
- Add output package with colored prefixes and module loggers
- Each module gets unique background color based on name hash
- Add spinner for indeterminate operations
- Add progress bar for known-count operations
- Update all scan files to use ModuleLogger pattern
- Add clean PrintSummary for scan completion
2026-01-03 05:57:10 -08:00
vmfunc
36a0e473e3
feat: show module loading and execution logs by default
2026-01-03 05:57:10 -08:00
vmfunc
d2537dae1b
refactor: move pkg/scan to internal/scan
2026-01-03 05:57:10 -08:00
vmfunc
2d306fcf1d
feat: implement loadYAML in module loader
2026-01-03 05:57:10 -08:00
vmfunc
dc537a02f2
feat: add module cli flags
2026-01-03 05:57:10 -08:00
vmfunc
01a10c6a2f
feat: add yaml module parser and http executor
2026-01-03 05:57:10 -08:00
vmfunc
9154f8e77a
feat: add module system infrastructure
2026-01-03 05:57:10 -08:00
vmfunc
539122ac4e
refactor: move config to internal
2026-01-03 05:57:10 -08:00
vmfunc
28588fe37c
refactor: move logger to internal
2026-01-03 05:57:10 -08:00
vmfunc
7ab5cfc18c
feat: add generic worker pool for concurrent task processing
...
implement channel-based work distribution with generics for type-safe
concurrent processing, includes run, runwithfilter, and foreach methods
with comprehensive test coverage
2026-01-03 05:57:09 -08:00
vmfunc
d30c7f56a3
license: switch to bsd 3-clause, update headers and readme
...
- replace proprietary license with bsd 3-clause
- update all go file headers with new retro terminal style
- add header-check github action to enforce license headers
- completely rewrite readme to be modern, sleek, and lowercase
- fix broken badges
2026-01-02 17:41:18 -08:00
vmfunc
b335a45a82
chore<format>: gofmt whitespace removal
2024-10-15 02:32:48 +02:00
vmfunc
267aa6e177
chore<comments>: bunch of AI-generated comments to make the codebase easier to understand
2024-10-12 23:06:22 +02:00
Sol Fisher Romanoff
d1273695b2
lint: go fmt -s
2023-09-14 20:48:59 +03:00
Sol Fisher Romanoff
b2a354137d
Move import repositories to dropalldatabases
2023-09-14 20:48:45 +03:00
Sol Fisher Romanoff
7aa66ee6b7
Use nuclei API to scan nuclei templates
2023-09-14 20:48:28 +03:00
Sol Fisher Romanoff
755b4641c7
Refactor
2023-09-14 20:46:47 +03:00
