Commit Graph

17 Commits

Author SHA1 Message Date
vmfunc
1eac29757c feat: framework detection module 2026-01-02 18:52:15 -08:00
Celeste Hickenlooper
612df34a5f feat: add lfi reconnaissance module (#49)
adds a new --lfi flag for local file inclusion vulnerability scanning:
- tests common lfi parameters with directory traversal payloads
- detects /etc/passwd, /etc/shadow, windows system files
- identifies php wrappers and encoded content
- supports various bypass techniques (null bytes, encoding)

closes #4
2026-01-02 18:41:30 -08:00
Celeste Hickenlooper
3ba18a956a feat: add sql reconnaissance module (#48)
adds a new --sql flag that performs sql reconnaissance on target urls:
- detects common database admin panels (phpmyadmin, adminer, pgadmin, etc.)
- identifies database error disclosure (mysql, postgresql, mssql, oracle, sqlite)
- scans common paths for sql injection indicators

closes #3
2026-01-02 18:40:06 -08:00
Celeste Hickenlooper
44842dd659 fix: remove duplicate subdomain takeover call and add config tests (#46)
- remove duplicate SubdomainTakeover call that ran twice when both
  dns scan and --st flag were enabled
- add comprehensive tests for config settings defaults and behavior
- fix formatting in dork.go

closes #1
2026-01-02 18:38:47 -08:00
Celeste Hickenlooper
ac879e069c feat: add shodan integration for host reconnaissance
adds a new --shodan flag that queries the shodan api for information
about the target host. requires SHODAN_API_KEY environment variable.

features:
- resolves hostnames to ip addresses
- queries shodan host api for reconnaissance data
- displays organization, isp, location, ports, services, and vulns
- logs results to file when logdir is specified

closes #2
2026-01-02 18:24:37 -08:00
Celeste Hickenlooper
df6ca7924b license: switch to bsd 3-clause, update headers and readme
- replace proprietary license with bsd 3-clause
- update all go file headers with new retro terminal style
- add header-check github action to enforce license headers
- completely rewrite readme to be modern, sleek, and lowercase
- fix broken badges
2026-01-02 17:41:18 -08:00
vmfunc
aff6fea45d chore<format>: gofmt whitespace removal 2024-10-15 02:32:48 +02:00
vmfunc
ac5e618695 chore<comments>: bunch of AI-generated comments to make the codebase easier to understand 2024-10-12 23:06:22 +02:00
vmfunc
2340e7a23f feat<st>: subdomain takeover checks 2024-10-12 22:52:27 +02:00
vmfunc
0f8e0fea13 feat<c3>: AWS c3 detection 2024-10-12 22:28:31 +02:00
vmfunc
0226bff095 feat<headers>: http header analysis 2024-10-12 22:15:56 +02:00
vmfunc
0e83a0778d feat<cms>: CMS detection 2024-10-12 22:10:06 +02:00
vmfunc
d2281c3c4a feat: add Template support to config 2024-07-10 05:01:35 -04:00
xyzeva
235c8cc1a4 feat: implement api mode 2024-06-22 12:09:50 +03:00
syscats
d54dcb2a21 feat: WHOIS support 2024-02-04 15:09:50 +01:00
syscats
16baaa253c feat: handle API flag 2024-02-04 14:08:39 +01:00
Sol Fisher Romanoff
979be3c5c6 Refactor 2023-09-14 20:46:47 +03:00