chore(deps): bump actions/checkout from 4 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/claude-code-review.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/claude.yml

@@ -26,7 +26,7 @@ jobs:
       actions: read # Required for Claude to read CI results on PRs
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/release.yml

@@ -171,7 +171,7 @@ jobs:
 
             **go install**
             ```bash
-            go install github.com/dropalldatabases/sif/cmd/sif@v${{ env.VERSION }}
+            go install github.com/vmfunc/sif/cmd/sif@v${{ env.VERSION }}
             ```
 
             **binary download** - grab the right archive from below.

.golangci.yml

@@ -36,7 +36,7 @@ linters:
       check-blank: false
       exclude-functions:
         # log writes are best-effort
-        - github.com/dropalldatabases/sif/internal/logger.Write
+        - github.com/vmfunc/sif/internal/logger.Write
         # Close on io.Closer is idiomatic best-effort
         - (io.Closer).Close
         - (*os.File).Close

cmd/sif/main.go

@@ -17,13 +17,13 @@ import (
 	"os"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif"
-	"github.com/dropalldatabases/sif/internal/config"
-	"github.com/dropalldatabases/sif/internal/patchnotes"
-	ver "github.com/dropalldatabases/sif/internal/version"
+	"github.com/vmfunc/sif"
+	"github.com/vmfunc/sif/internal/config"
+	"github.com/vmfunc/sif/internal/patchnotes"
+	ver "github.com/vmfunc/sif/internal/version"
 
 	// Register framework detectors
-	_ "github.com/dropalldatabases/sif/internal/scan/frameworks/detectors"
+	_ "github.com/vmfunc/sif/internal/scan/frameworks/detectors"
 )
 
 // version is stamped at release time via -ldflags "-X main.version=...";

docs/README.md

@@ -31,7 +31,7 @@ welcome to the sif documentation. sif is a modular pentesting toolkit designed t
 
 ```bash
 # install
-git clone https://github.com/dropalldatabases/sif.git && cd sif && make
+git clone https://github.com/vmfunc/sif.git && cd sif && make
 
 # basic scan
 ./sif -u https://example.com

docs/development.md

@@ -11,7 +11,7 @@ setting up a development environment for sif.
 ## clone and build
 
 ```bash
-git clone https://github.com/dropalldatabases/sif.git
+git clone https://github.com/vmfunc/sif.git
 cd sif
 make
 ```

docs/installation.md

@@ -39,7 +39,7 @@ download `sif-windows-amd64.exe` from releases and add to your PATH.
 requires go 1.25+
 
 ```bash
-git clone https://github.com/dropalldatabases/sif.git
+git clone https://github.com/vmfunc/sif.git
 cd sif
 make
 ```

go.mod

@@ -1,4 +1,4 @@
-module github.com/dropalldatabases/sif
+module github.com/vmfunc/sif
 
 go 1.25.7
 

internal/finding/finding.go

@@ -21,11 +21,11 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/dropalldatabases/sif/internal/modules"
-	"github.com/dropalldatabases/sif/internal/scan"
-	"github.com/dropalldatabases/sif/internal/scan/frameworks"
-	"github.com/dropalldatabases/sif/internal/scan/js"
 	"github.com/projectdiscovery/nuclei/v3/pkg/output"
+	"github.com/vmfunc/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/scan"
+	"github.com/vmfunc/sif/internal/scan/frameworks"
+	"github.com/vmfunc/sif/internal/scan/js"
 )
 
 // Finding is the normalized shape every scanner result collapses to. one

internal/finding/finding_test.go

@@ -16,13 +16,13 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/dropalldatabases/sif/internal/modules"
-	"github.com/dropalldatabases/sif/internal/scan"
-	"github.com/dropalldatabases/sif/internal/scan/frameworks"
-	"github.com/dropalldatabases/sif/internal/scan/js"
 	"github.com/projectdiscovery/nuclei/v3/pkg/model"
 	"github.com/projectdiscovery/nuclei/v3/pkg/model/types/severity"
 	"github.com/projectdiscovery/nuclei/v3/pkg/output"
+	"github.com/vmfunc/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/scan"
+	"github.com/vmfunc/sif/internal/scan/frameworks"
+	"github.com/vmfunc/sif/internal/scan/js"
 )
 
 // scanResultType mirrors the minimal interface the scan packages implement; the

internal/modules/analytics_ui_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runAnalyticsModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/app_config_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runAppCfgModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/argocd_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runArgocdModule(t *testing.T, status int, body string) *modules.Result {

internal/modules/attack_modes_test.go

@@ -23,7 +23,7 @@ import (
 	"sync"
 	"testing"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 func reqURLs(reqs []*httpRequest) []string {

internal/modules/bigdata_api_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runBigDataModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/buildtool_credential_exposure_test.go

@@ -19,7 +19,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runBuildCredModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/cms_config_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runCMSCfgModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/credential_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runCredModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/data_pipeline_api_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runPipelineModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/database_file_exposure_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runDBFileModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/db_panels_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runDBModule(t *testing.T, file string, status int, headers map[string]string, body string) *modules.Result {

internal/modules/debug_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runDebugModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/deploy_config_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runDeployModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/distributed_db_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runDistDBModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/dotfile_credential_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runDotfileModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/env_exposure_test.go

@@ -19,7 +19,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 // runEnvModule runs the env exposure module end to end against a server that

internal/modules/executor_test.go

@@ -22,7 +22,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 const testTimeout = 5 * time.Second

internal/modules/favicon.go

@@ -16,7 +16,7 @@ import (
 	"fmt"
 	"math"
 
-	"github.com/dropalldatabases/sif/internal/fingerprint"
+	"github.com/vmfunc/sif/internal/fingerprint"
 )
 
 // checkFaviconHash reports whether the body's shodan mmh3 hash matches any

internal/modules/favicon_test.go

@@ -21,8 +21,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/dropalldatabases/sif/internal/fingerprint"
-	"github.com/dropalldatabases/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/fingerprint"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 // faviconFixture hashes to a negative int32, so its signed and unsigned forms

internal/modules/http_database_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runHTTPDBModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/infra_config_exposure_test.go

@@ -19,7 +19,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runInfraModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/json_extractor_test.go

@@ -18,7 +18,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 func TestRunExtractorsJSON(t *testing.T) {

internal/modules/loader.go

@@ -19,7 +19,7 @@ import (
 	"runtime"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // Loader handles module discovery and loading.

internal/modules/login_panels_test.go

@@ -19,7 +19,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runLoginModule(t *testing.T, file string, status int, headers map[string]string, body string) *modules.Result {

internal/modules/management_api_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runMgmtModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/matchers_condition_test.go

@@ -21,7 +21,7 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 func TestCheckMatchersCondition(t *testing.T) {

internal/modules/metrics_exposure_test.go

@@ -19,7 +19,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runMetricsModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/module.go

@@ -93,7 +93,7 @@ type Matcher struct {
 	Status    []int    `yaml:"status,omitempty"`
 	Size      []int    `yaml:"size,omitempty"`
 	Hash      []int64  `yaml:"hash,omitempty"` // favicon: shodan mmh3 hashes (signed or unsigned)
-	Condition string   `yaml:"condition"` // and, or
+	Condition string   `yaml:"condition"`      // and, or
 	Negative  bool     `yaml:"negative"`
 }
 

internal/modules/ops_panels_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 // runOpsModule runs a shipped module end to end against a server that returns

internal/modules/orchestration_api_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runOrchModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/rails_secret_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runRailsModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/registry_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runRegistryModule(t *testing.T, file string, status int, headers map[string]string, body string) *modules.Result {

internal/modules/runtime_api_exposure_test.go

@@ -19,7 +19,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runRuntimeModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/secret_file_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runSecretModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/vcs_metadata_exposure_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runVCSModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/vector_db_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runVectorDBModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/modules/webserver_config_exposure_test.go

@@ -7,7 +7,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 func runWebSrvModule(t *testing.T, file string, status int, body string) *modules.Result {

internal/notify/discord.go

@@ -16,7 +16,7 @@ import (
 	"context"
 	"net/http"
 
-	"github.com/dropalldatabases/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/finding"
 )
 
 // discordProvider posts to a discord webhook. discord's incoming-webhook body

internal/notify/message.go

@@ -20,8 +20,8 @@ import (
 	"net/http"
 	"strings"
 
-	"github.com/dropalldatabases/sif/internal/finding"
-	"github.com/dropalldatabases/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 // contentTypeJSON is the body type every provider POSTs; all four speak json.

internal/notify/notify.go

@@ -22,9 +22,9 @@ import (
 	"net/http"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/finding"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // Options carries the runtime knobs Send needs. Timeout bounds each provider's

internal/notify/notify_test.go

@@ -22,7 +22,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/finding"
 )
 
 // sampleFindings returns a small mixed-severity batch for payload assertions.

internal/notify/slack.go

@@ -16,7 +16,7 @@ import (
 	"context"
 	"net/http"
 
-	"github.com/dropalldatabases/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/finding"
 )
 
 // slackProvider posts to a slack incoming webhook. the webhook url already pins

internal/notify/telegram.go

@@ -16,7 +16,7 @@ import (
 	"context"
 	"net/http"
 
-	"github.com/dropalldatabases/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/finding"
 )
 
 // telegramAPIBase is the bot api root. it's a var so tests can repoint it at an

internal/notify/webhook.go

@@ -16,7 +16,7 @@ import (
 	"context"
 	"net/http"
 
-	"github.com/dropalldatabases/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/finding"
 )
 
 // webhookProvider posts a structured json payload to an arbitrary endpoint. unlike

internal/nuclei/format/format.go

@@ -13,8 +13,8 @@
 package format
 
 import (
-	"github.com/dropalldatabases/sif/internal/styles"
 	nucleiout "github.com/projectdiscovery/nuclei/v3/pkg/output"
+	"github.com/vmfunc/sif/internal/styles"
 )
 
 func FormatLine(event *nucleiout.ResultEvent) string {

internal/scan/builtin/frameworks_module.go

@@ -17,8 +17,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/dropalldatabases/sif/internal/modules"
-	"github.com/dropalldatabases/sif/internal/scan/frameworks"
+	"github.com/vmfunc/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/scan/frameworks"
 )
 
 type FrameworksModule struct{}

internal/scan/builtin/nuclei_module.go

@@ -16,8 +16,8 @@ import (
 	"context"
 	"fmt"
 
-	"github.com/dropalldatabases/sif/internal/modules"
-	"github.com/dropalldatabases/sif/internal/scan"
+	"github.com/vmfunc/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/scan"
 )
 
 type NucleiModule struct{}

internal/scan/builtin/register.go

@@ -12,7 +12,7 @@
 
 package builtin
 
-import "github.com/dropalldatabases/sif/internal/modules"
+import "github.com/vmfunc/sif/internal/modules"
 
 // Register registers all Go-based built-in scans as modules.
 // Allows complex Go scans to participate in the module system

internal/scan/builtin/securitytrails_module.go

@@ -17,8 +17,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/dropalldatabases/sif/internal/modules"
-	"github.com/dropalldatabases/sif/internal/scan"
+	"github.com/vmfunc/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/scan"
 )
 
 type SecurityTrailsModule struct{}

internal/scan/builtin/shodan_module.go

@@ -17,8 +17,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/dropalldatabases/sif/internal/modules"
-	"github.com/dropalldatabases/sif/internal/scan"
+	"github.com/vmfunc/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/scan"
 )
 
 type ShodanModule struct{}

internal/scan/builtin/whois_module.go

@@ -15,8 +15,8 @@ package builtin
 import (
 	"context"
 
-	"github.com/dropalldatabases/sif/internal/modules"
-	"github.com/dropalldatabases/sif/internal/scan"
+	"github.com/vmfunc/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/scan"
 )
 
 type WhoisModule struct{}

internal/scan/cloudstorage.go

@@ -21,9 +21,9 @@ import (
 	"time"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/styles"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/styles"
 )
 
 // s3EndpointFmt is a var so integration tests can repoint it at a fixture; the

internal/scan/cms.go

@@ -19,9 +19,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 type CMSResult struct {

internal/scan/cors.go

@@ -22,9 +22,9 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // CORSResult collects every cors misconfiguration found on the target.

internal/scan/crawl.go

@@ -21,9 +21,9 @@ import (
 
 	"github.com/gocolly/colly/v2"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // CrawlResult holds the deduped set of urls discovered by the spider.

internal/scan/dirlist.go

@@ -26,14 +26,14 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
-	"github.com/dropalldatabases/sif/internal/pool"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
+	"github.com/vmfunc/sif/internal/pool"
 )
 
 // directoryURL is a var so integration tests can repoint it at a fixture.
-var directoryURL = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/dirlist/"
+var directoryURL = "https://raw.githubusercontent.com/vmfunc/sif-runtime/main/dirlist/"
 
 const (
 	smallFile  = "directory-list-2.3-small.txt"

internal/scan/dnslist.go

@@ -21,15 +21,15 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/dnsx"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
-	"github.com/dropalldatabases/sif/internal/pool"
+	"github.com/vmfunc/sif/internal/dnsx"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
+	"github.com/vmfunc/sif/internal/pool"
 )
 
 // dnsURL is a var so integration tests can repoint it at a fixture.
-var dnsURL = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/dnslist/"
+var dnsURL = "https://raw.githubusercontent.com/vmfunc/sif-runtime/main/dnslist/"
 
 // dnsTransport is a var so integration tests can route the per-host probes at a
 // local server instead of resolving real DNS. nil keeps http.DefaultTransport.

internal/scan/dork.go

@@ -25,15 +25,15 @@ import (
 	"time"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
-	"github.com/dropalldatabases/sif/internal/pool"
 	googlesearch "github.com/rocketlaunchr/google-search"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
+	"github.com/vmfunc/sif/internal/pool"
 )
 
 const (
-	dorkURL  = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/dork/"
+	dorkURL  = "https://raw.githubusercontent.com/vmfunc/sif-runtime/main/dork/"
 	dorkFile = "dork.txt"
 )
 

internal/scan/favicon.go

@@ -21,10 +21,10 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/fingerprint"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/fingerprint"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // FaviconResult is the computed shodan-style favicon hash plus the pivot query

internal/scan/favicon_demo_sync_test.go

@@ -17,7 +17,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/dropalldatabases/sif/internal/modules"
+	"github.com/vmfunc/sif/internal/modules"
 )
 
 // favicon demo modules must reference a hash from faviconHashes that names the

internal/scan/frameworks/custom.go

@@ -30,7 +30,7 @@ import (
 	"strings"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/output"
 	"gopkg.in/yaml.v3"
 )
 

internal/scan/frameworks/detect.go

@@ -22,9 +22,9 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // detectionThreshold is the minimum confidence for a detection to be reported.

internal/scan/frameworks/detect_test.go

@@ -18,9 +18,9 @@ import (
 	"testing"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/scan/frameworks"
+	"github.com/vmfunc/sif/internal/scan/frameworks"
 	// Import detectors to register them via init()
-	_ "github.com/dropalldatabases/sif/internal/scan/frameworks/detectors"
+	_ "github.com/vmfunc/sif/internal/scan/frameworks/detectors"
 )
 
 func TestExtractVersion_Laravel(t *testing.T) {

internal/scan/frameworks/detectors/backend.go

@@ -23,7 +23,7 @@ import (
 	"math"
 	"net/http"
 
-	fw "github.com/dropalldatabases/sif/internal/scan/frameworks"
+	fw "github.com/vmfunc/sif/internal/scan/frameworks"
 )
 
 func init() {

internal/scan/frameworks/detectors/cms.go

@@ -22,7 +22,7 @@ package detectors
 import (
 	"net/http"
 
-	fw "github.com/dropalldatabases/sif/internal/scan/frameworks"
+	fw "github.com/vmfunc/sif/internal/scan/frameworks"
 )
 
 func init() {

internal/scan/frameworks/detectors/frontend.go

@@ -22,7 +22,7 @@ package detectors
 import (
 	"net/http"
 
-	fw "github.com/dropalldatabases/sif/internal/scan/frameworks"
+	fw "github.com/vmfunc/sif/internal/scan/frameworks"
 )
 
 func init() {

internal/scan/frameworks/detectors/meta.go

@@ -22,7 +22,7 @@ package detectors
 import (
 	"net/http"
 
-	fw "github.com/dropalldatabases/sif/internal/scan/frameworks"
+	fw "github.com/vmfunc/sif/internal/scan/frameworks"
 )
 
 func init() {

internal/scan/git.go

@@ -22,14 +22,14 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
-	"github.com/dropalldatabases/sif/internal/pool"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
+	"github.com/vmfunc/sif/internal/pool"
 )
 
 // gitURL is a var so integration tests can repoint it at a fixture.
-var gitURL = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/git/"
+var gitURL = "https://raw.githubusercontent.com/vmfunc/sif-runtime/main/git/"
 
 const gitFile = "git.txt"
 

internal/scan/headers.go

@@ -17,9 +17,9 @@ import (
 	"net/http"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 type HeaderResult struct {

internal/scan/js/frameworks/next.go

@@ -30,8 +30,8 @@ import (
 	"regexp"
 	"strings"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
 	urlutil "github.com/projectdiscovery/utils/url"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 // nextPagesRegex matches JavaScript file references in Next.js build manifest.

internal/scan/js/scan.go

@@ -22,10 +22,10 @@ import (
 
 	"github.com/antchfx/htmlquery"
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/output"
-	"github.com/dropalldatabases/sif/internal/scan/js/frameworks"
 	urlutil "github.com/projectdiscovery/utils/url"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/output"
+	"github.com/vmfunc/sif/internal/scan/js/frameworks"
 )
 
 type JavascriptScanResult struct {

internal/scan/js/supabase.go

@@ -30,7 +30,7 @@ import (
 	"time"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/httpx"
 )
 
 // jwtRegex matches JWT tokens in JavaScript content.

internal/scan/jwt.go

@@ -27,9 +27,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // JWTResult collects every token discovered on the target plus the offline

internal/scan/lfi.go

@@ -24,9 +24,9 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // LFIResult represents the results of LFI reconnaissance

internal/scan/nuclei.go

@@ -19,11 +19,11 @@ import (
 	"time"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/nuclei/format"
-	"github.com/dropalldatabases/sif/internal/nuclei/templates"
-	sifoutput "github.com/dropalldatabases/sif/internal/output"
 	nuclei "github.com/projectdiscovery/nuclei/v3/lib"
 	"github.com/projectdiscovery/nuclei/v3/pkg/output"
+	"github.com/vmfunc/sif/internal/nuclei/format"
+	"github.com/vmfunc/sif/internal/nuclei/templates"
+	sifoutput "github.com/vmfunc/sif/internal/output"
 )
 
 func Nuclei(url string, timeout time.Duration, threads int, logdir string) ([]output.ResultEvent, error) {

internal/scan/openapi.go

@@ -24,9 +24,9 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 	"gopkg.in/yaml.v3"
 )
 

internal/scan/passive.go

@@ -23,9 +23,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // source base urls are vars so tests can repoint them at local fixtures. they

internal/scan/ports.go

@@ -23,14 +23,14 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
-	"github.com/dropalldatabases/sif/internal/pool"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
+	"github.com/vmfunc/sif/internal/pool"
 )
 
 // commonPorts is a var so integration tests can repoint it at a fixture.
-var commonPorts = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/ports/top-ports.txt"
+var commonPorts = "https://raw.githubusercontent.com/vmfunc/sif-runtime/main/ports/top-ports.txt"
 
 func Ports(ctx context.Context, scope string, url string, timeout time.Duration, threads int, logdir string) ([]string, error) {
 	log := output.Module("PORTS")

internal/scan/probe.go

@@ -21,9 +21,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // ProbeResult is the httpx-style liveness snapshot for one target: did it answer,

internal/scan/redirect.go

@@ -24,9 +24,9 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // RedirectResult collects every open-redirect found on the target.

internal/scan/scan.go

@@ -26,10 +26,10 @@ import (
 	"time"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
-	"github.com/dropalldatabases/sif/internal/pool"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
+	"github.com/vmfunc/sif/internal/pool"
 )
 
 // stripScheme drops the scheme:// prefix from url, or returns it unchanged when

internal/scan/securityheaders.go

@@ -19,9 +19,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 type SecurityHeaderResult struct {

internal/scan/securitytrails.go

@@ -23,9 +23,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // securityTrailsBaseURL is a var so integration tests can repoint it at a fixture.

internal/scan/shodan.go

@@ -24,9 +24,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // shodanBaseURL is a var so integration tests can repoint it at a fixture.

internal/scan/sql.go

@@ -23,9 +23,9 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // SQLResult represents the results of SQL reconnaissance

internal/scan/subdomaintakeover.go

@@ -23,10 +23,10 @@ import (
 	"time"
 
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/pool"
-	"github.com/dropalldatabases/sif/internal/styles"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/pool"
+	"github.com/vmfunc/sif/internal/styles"
 )
 
 // SubdomainTakeoverResult represents the outcome of a subdomain takeover vulnerability check.

internal/scan/whois.go

@@ -14,9 +14,9 @@ package scan
 
 import (
 	"github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
 	"github.com/likexian/whois"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 func Whois(url string, logdir string) {

internal/scan/xss.go

@@ -23,9 +23,9 @@ import (
 	"time"
 
 	charmlog "github.com/charmbracelet/log"
-	"github.com/dropalldatabases/sif/internal/httpx"
-	"github.com/dropalldatabases/sif/internal/logger"
-	"github.com/dropalldatabases/sif/internal/output"
+	"github.com/vmfunc/sif/internal/httpx"
+	"github.com/vmfunc/sif/internal/logger"
+	"github.com/vmfunc/sif/internal/output"
 )
 
 // XSSResult collects every likely reflected-xss point on the target.

internal/store/store.go

@@ -24,7 +24,7 @@ import (
 	"path/filepath"
 	"strings"
 
-	"github.com/dropalldatabases/sif/internal/finding"
+	"github.com/vmfunc/sif/internal/finding"
 )
 
 // snapshotFileMode is applied to written snapshot files: owner read/write only.