Commit Graph

Select branches

Hide Pull Requests

add-claude-github-actions-1782178659075

all-contributors/add-D3adPlays

all-contributors/add-macdoos

all-contributors/add-projectdiscovery

all-contributors/add-pushfs

all-contributors/add-tessa-u-k

all-contributors/add-vmfunc

all-contributors/add-xyzeva

chore/bump-setup-go-v6

ci/bump-go-1.25

ci/release-ldflags

dependabot/github_actions/actions/labeler-7

dependabot/github_actions/github/codeql-action-4.37.3

dependabot/github_actions/ossf/scorecard-action-2.4.4

dependabot/github_actions/reviewdog/action-yamllint-1.23.0

dependabot/go_modules/github.com/projectdiscovery/goflags-0.1.75

dependabot/go_modules/go_modules-715adc688b

feat/framework-detection

feat/httpx-client

feat/shodan-integration

fix/favicon-test-checkmatchers-arity

fix/integration-sql-arity

fix/pr-bot-fork-token

fix/progress-milestones

lfi

main

test/scanner-seams

whois

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#120

#121

#122

#123

#124

#126

#127

#128

#129

#13

#130

#131

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#270

#271

#272

#272

#273

#274

#275

#275

#276

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#287

#288

#289

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#30

#300

#301

#302

#302

#303

#304

#305

#306

#307

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#325

#326

#327

#328

#329

#33

#330

#330

#331

#332

#333

#334

#334

#335

#335

#336

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#356

#357

#358

#359

#359

#36

#360

#361

#361

#362

#363

#363

#364

#364

#365

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#375

#376

#376

#377

#377

#378

#378

#379

#379

#38

#380

#380

#381

#381

#382

#382

#383

#383

#384

#384

#385

#385

#386

#386

#387

#387

#388

#388

#389

#389

#390

#390

#40

#41

#43

#45

#46

#47

#48

#49

#51

#53

#55

#56

#58

#59

#60

#61

#62

#63

#64

#66

#67

#68

#69

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

automated-release-02bb8ae

automated-release-03bfe70

automated-release-04db9be

automated-release-057b997

automated-release-061c5fb

automated-release-0e0648a

automated-release-1e7f713

automated-release-2372eba

automated-release-2cfdc51

automated-release-373b2ae

automated-release-3ba18a9

automated-release-3d431bd

automated-release-3e5849d

automated-release-3ecfdf8

automated-release-421965e

automated-release-42d16bd

automated-release-44842dd

automated-release-47007d8

automated-release-4e32350

automated-release-50ccb0b

automated-release-5add3a7

automated-release-612df34

automated-release-6a67031

automated-release-6c44c6d

automated-release-6df11f8

automated-release-73590d8

automated-release-752d410

automated-release-7ff0d04

automated-release-803fe51

automated-release-80ca5a1

automated-release-816ecd1

automated-release-85654f6

automated-release-8fb797d

automated-release-9267d9d

automated-release-9636888

automated-release-97de4f8

automated-release-9e71b51

automated-release-a0d6719

automated-release-a36993a

automated-release-a998052

automated-release-af53185

automated-release-aff6fea

automated-release-b36dfd7

automated-release-bc05786

automated-release-bef84ce

automated-release-c988e54

automated-release-cb22206

automated-release-d9dd3dc

automated-release-df6ca79

automated-release-e032687

automated-release-e9bd112

automated-release-ec51fb6

automated-release-ee77dd8

automated-release-ef014de

automated-release-ef96746

automated-release-f03df26

automated-release-f53d739

automated-release-f8ce014

automated-release-fe0119b

v2024.10.12

v2026.2.17

v2026.6.10

v2026.6.7

v2026.6.9

Mono Color

• 04aced859b chore(deps): bump github/codeql-action from 4 to 4.37.3 dependabot/github_actions/github/codeql-action-4.37.3 dependabot[bot]andGitHub 2026-07-31 12:44:24 +00:00
• e0c3e0e1b9 chore(deps): bump github.com/projectdiscovery/goflags dependabot/go_modules/github.com/projectdiscovery/goflags-0.1.75 dependabot[bot]andGitHub 2026-07-31 12:43:12 +00:00
• 442295c763 chore(deps): bump github.com/getkin/kin-openapi dependabot/go_modules/go_modules-715adc688b dependabot[bot]andGitHub 2026-07-28 11:54:28 +00:00
• 55d1094517 chore(deps): bump actions/labeler from 6 to 7 dependabot/github_actions/actions/labeler-7 dependabot[bot]andGitHub 2026-07-24 12:43:44 +00:00
• ad27e775d5 chore(deps): bump reviewdog/action-yamllint from 1.22.0 to 1.23.0 dependabot/github_actions/reviewdog/action-yamllint-1.23.0 dependabot[bot]andGitHub 2026-07-24 12:43:41 +00:00
• c64ea41db2 chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 dependabot/github_actions/ossf/scorecard-action-2.4.4 dependabot[bot]andGitHub 2026-07-24 12:43:34 +00:00
• a38ba0abd0 fix(modules): read the chained-request body through the shared cap (#374) main TigahandGitHub 2026-07-22 16:18:22 -07:00
• 2ce359a831 fix(tcp): stop a cancelled context from being swallowed by the deadline re-arm (#366) TigahandGitHub 2026-07-22 15:48:54 -07:00
• f6db61b0ef refactor: share path-resolution and body-cap helpers (#355) TigahandGitHub 2026-07-22 15:48:49 -07:00
• c2dbe4a19f feat(modules): add dynamic-variable request chaining (#317) 3 people 2026-07-22 15:45:50 -07:00
• b805bfbb87 fix(frameworks): stop django source prose from faking detection (#328) 3 people 2026-07-22 15:44:53 -07:00
• 1820ba2547 feat(frameworks): report every detected technology (#314) 3 people 2026-07-22 15:41:19 -07:00
• c195e88453 feat(modules): add a range matcher for response size or status (#362) 3 people 2026-07-22 15:40:58 -07:00
• 3e0029755e feat(scan): add tls certificate recon module (#274) 3 people 2026-07-22 15:35:51 -07:00
• 1d7e219656 feat(fuzz): add fuzz harnesses for jwt, secrets and yaml parsing (#340) 3 people 2026-07-22 15:24:43 -07:00
• 7d206ad033 fix(frameworks): stop prose and image mime types from faking magento (#322) 3 people 2026-07-22 15:10:21 -07:00
• a09643c070 fix(scan): decode supabase jwt body as base64url (#348) 3 people 2026-07-22 15:06:32 -07:00
• 6500b08d1a fix(scan): capture every chunk in next.js build manifest arrays (#345) 3 people 2026-07-22 14:54:46 -07:00
• d52cd842a9 fix(scan): fetch wayback source over https (#351) 3 people 2026-07-22 14:01:33 -07:00
• a664f36934 fix(modules): route module scans through the shared http transport (#318) 3 people 2026-07-22 13:36:19 -07:00
• 01856440e8 fix(modules): pass case-insensitive flag to tcp word matcher (#373) 3 people 2026-07-22 13:25:04 -07:00
• bd91f7f590 feat(frameworks): add web application firewall detectors (#360) TigahandGitHub 2026-07-22 12:57:18 -07:00
• 059d7356bf refactor(fingerprint): make the favicon tech table the single source (#358) TigahandGitHub 2026-07-22 12:57:09 -07:00
• dff4de397e feat(config): add -config/-profile config file and profile overlays (#357) TigahandGitHub 2026-07-22 12:56:59 -07:00
• c5fed20d86 fix(scan): decode html entities in probe title (#354) TigahandGitHub 2026-07-22 12:56:38 -07:00
• 7e6f6fe2e6 feat(pool): add EachCtx for cancellable fan-out (#352) TigahandGitHub 2026-07-22 12:56:27 -07:00
• 75597fc90d fix(scan): resolve favicon href against origin to stop pathful-target misfetch (#350) TigahandGitHub 2026-07-22 12:56:12 -07:00
• a435c048a4 feat(modules): add crlf and ssi injection detection modules (#347) TigahandGitHub 2026-07-22 12:55:41 -07:00
• 91df2ccd56 fix(modules): guard regex extractor against negative group index (#346) TigahandGitHub 2026-07-22 12:55:32 -07:00
• d93fcbcd46 fix(scan): tune js secret rules for false positives and missed formats (#344) TigahandGitHub 2026-07-22 12:55:17 -07:00
• a44cfb230f fix(store,logger,scan): concurrency-adjacent races and correctness fixes (#343) TigahandGitHub 2026-07-22 12:55:08 -07:00
• c1b7c7c027 fix(js): supabase jwt base64url decode and per-project error isolation (#342) TigahandGitHub 2026-07-22 12:54:58 -07:00
• e04d4e1b59 fix(detectors): framework detector fp/fn corpus pass (#341) TigahandGitHub 2026-07-22 12:54:49 -07:00
• 598d85e501 fix(scan): validate git exposure responses are real git artifacts (#339) TigahandGitHub 2026-07-22 12:54:34 -07:00
• 3e55f38c91 fix(modules): search system data dirs for built-in modules (#338) TigahandGitHub 2026-07-22 12:54:05 -07:00
• d8ca2e96b1 fix(report): sort sarif driver rules and strip crlf from markdown headers (#337) TigahandGitHub 2026-07-22 12:53:56 -07:00
• 788d20c18e fix(crawl): stop redirects escaping crawl scope, cap fanout (#333) TigahandGitHub 2026-07-22 12:53:41 -07:00
• 03b023eba5 fix(httpx): stop leaking cookie/auth headers on cross-host redirects (#332) TigahandGitHub 2026-07-22 12:53:32 -07:00
• 281e59cc9e feat(output): add routable Sink for per-scan output capture (#331) TigahandGitHub 2026-07-22 12:53:23 -07:00
• 1f6d0f7cf0 fix(scan): percent-encode dork queries before search (#327) TigahandGitHub 2026-07-22 12:53:04 -07:00
• a35f3bc71f fix(scan): truncate shodan banners on rune boundaries (#326) TigahandGitHub 2026-07-22 12:52:55 -07:00
• 41f35acd66 fix(scan): honour the caller context when downloading the ports list (#324) TigahandGitHub 2026-07-22 12:52:21 -07:00
• b72e076fc7 fix(js): bound next.js manifest fetch with the scan timeout (#323) TigahandGitHub 2026-07-22 12:52:12 -07:00
• 22935328b5 fix(scan): stop one over-long url from dropping the wayback feed (#321) TigahandGitHub 2026-07-22 12:51:57 -07:00
• fa84b3f7a5 fix(frameworks): match cve entries against a bare-major version (#320) TigahandGitHub 2026-07-22 12:51:48 -07:00
• 5ebeb89f93 feat(modules): add case-insensitive word matcher option (#319) TigahandGitHub 2026-07-22 12:51:39 -07:00
• 356b16fc63 feat(modules): embed built-in modules in the binary (#316) TigahandGitHub 2026-07-22 12:51:20 -07:00
• f570dceadc feat(report): add json findings report with -json (#313) TigahandGitHub 2026-07-22 12:50:08 -07:00
• 5972cc9272 fix(report): map sarif level to finding severity (#312) TigahandGitHub 2026-07-22 12:49:59 -07:00
• a46aea12fc fix(scan): accept string-encoded jwt exp claim (#311) TigahandGitHub 2026-07-22 12:49:50 -07:00
• 5e1c029e09 fix(scan): grade hsts on the final response scheme after redirects (#310) TigahandGitHub 2026-07-22 12:49:40 -07:00
• e2da1bc5d8 fix(scan): tolerate ref path items when parsing openapi specs (#309) TigahandGitHub 2026-07-22 12:49:31 -07:00
• bf8c6a8643 feat(modules): add tcp module executor and recon modules (#308) TigahandGitHub 2026-07-22 12:49:22 -07:00
• e8eee5c530 fix(scan): strip url whitespace before open-redirect host check (#306) TigahandGitHub 2026-07-22 12:49:07 -07:00
• 12067b4279 fix(scan): gate cors http-downgrade probe on https targets only (#305) TigahandGitHub 2026-07-22 12:48:40 -07:00
• 9fce39cd32 fix(scan): baseline-diff sql errors against shared templates (#304) TigahandGitHub 2026-07-22 12:48:31 -07:00
• 4f01345974 fix(scan): baseline-diff lfi evidence to stop static-content false positives (#303) TigahandGitHub 2026-07-22 12:48:22 -07:00
• 243e0aba16 feat(modules): add haproxy stats, nexus and pushgateway exposure modules (#301) TigahandGitHub 2026-07-22 12:48:13 -07:00
• 5444090ea4 feat(modules): add chartmuseum and verdaccio registry exposure modules (#300) TigahandGitHub 2026-07-22 12:48:03 -07:00
• cb65f868c3 feat(modules): add terraform tfvars, ansible vault and ci config exposure modules (#299) TigahandGitHub 2026-07-22 12:47:54 -07:00
• b4206ef269 feat(modules): add guacamole and webmin login exposure modules (#298) TigahandGitHub 2026-07-22 12:47:45 -07:00
• 473c74da5e feat(modules): add nsq and pulsar exposure modules (#297) TigahandGitHub 2026-07-22 12:47:36 -07:00
• f658fc2466 feat(modules): add hpe ilo, dell idrac and redfish exposure modules (#296) TigahandGitHub 2026-07-22 12:47:27 -07:00
• 49e41e4d0f feat(modules): add vaultwarden, authentik and synapse version modules (#295) TigahandGitHub 2026-07-22 12:47:18 -07:00
• 2a88881961 feat(modules): add grafana tempo and otel zpages exposure modules (#294) TigahandGitHub 2026-07-22 12:46:52 -07:00
• 015f4583bb feat(modules): add node inspector, rails routes and openapi exposure modules (#293) TigahandGitHub 2026-07-22 12:46:43 -07:00
• 80c2574800 feat(recon): add postfixadmin setup and panel fingerprints (#292) TigahandGitHub 2026-07-22 12:46:34 -07:00
• a673eacdce feat(info): add roundcube and zimbra webmail fingerprints (#291) TigahandGitHub 2026-07-22 12:46:24 -07:00
• c24617d16c feat(recon): add kubeflow pipelines and metaflow exposure modules (#290) TigahandGitHub 2026-07-22 12:46:15 -07:00
• b4fae85847 feat(recon): add localai and invokeai exposure modules (#289) TigahandGitHub 2026-07-22 12:46:06 -07:00
• 1ea8eff267 feat(modules): add s3, gcs and azure bucket listing modules (#288) TigahandGitHub 2026-07-22 12:45:57 -07:00
• 9be3d4a51c fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286) TigahandGitHub 2026-07-22 12:45:48 -07:00
• 251be8481e fix(frameworks): stop gatsby and svelte prose from faking detection (#285) TigahandGitHub 2026-07-22 12:45:38 -07:00
• 39244b454e fix(recon): tighten directory-listing matchers to real listing furniture (#284) TigahandGitHub 2026-07-22 12:45:29 -07:00
• 64a22501c7 fix(scan): report the found url in dork results and dedupe by url (#283) TigahandGitHub 2026-07-22 12:36:38 -07:00
• 6b7762fcdf fix(scan): require a real bucket listing body before flagging s3 exposure (#282) TigahandGitHub 2026-07-22 12:36:29 -07:00
• 3ecc7e6f95 fix(scan): correlate cname before confirming subdomain takeover (#281) TigahandGitHub 2026-07-22 12:36:19 -07:00
• 7742b8e731 feat(modules): add laravel telescope dashboard exposure module (#279) TigahandGitHub 2026-07-22 12:36:10 -07:00
• 1f3708531d feat(modules): add mongo-express, redis-commander and pgweb exposure (#278) TigahandGitHub 2026-07-22 12:36:01 -07:00
• 294bfb090b feat(modules): add host-header injection and xxe probe modules (#277) TigahandGitHub 2026-07-22 12:35:51 -07:00
• 2cfee4cc3f feat(modules): add disable-redirects http option (#273) TigahandGitHub 2026-07-22 12:35:36 -07:00
• f8f3b8cca6 feat(modules): add active web-vuln probe modules (#271) TigahandGitHub 2026-07-22 12:35:27 -07:00
• 0d96838ee4 fix(scan): bound crawl breadth with a page budget (#269) TigahandGitHub 2026-07-22 12:35:18 -07:00
• ef4b690e77 ci: run go and functional-test on merge_group (#372) celesteandGitHub 2026-07-22 11:51:05 -07:00
• 296586911f chore(deps): bump reviewdog/action-markdownlint from 0.27.0 to 0.28.0 (#370) 3 people 2026-07-21 09:37:37 -07:00
• 149fb6cb2d chore(deps): bump actions/setup-go from 5 to 7 (#371) 3 people 2026-07-21 09:37:24 -07:00
• d13622dc1c feat(scan): add -concurrency flag to scan targets in parallel (#367) TigahandGitHub 2026-07-12 14:23:35 -07:00
• 24f3481fb1 chore(deps): bump github.com/projectdiscovery/nuclei/v3 (#368) 3 people 2026-07-12 14:22:52 -07:00
• 9c4204f91c chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 (#369) 3 people 2026-07-12 14:22:37 -07:00
• 7ea1cd28d5 feat(modules): add traefik, nomad and portainer exposure modules (#249) TigahandGitHub 2026-07-02 17:00:50 -07:00
• 9e8fb3a8d5 feat(modules): detect exposed ml platforms (#240) TigahandGitHub 2026-07-02 17:00:47 -07:00
• abcc22de38 feat(modules): detect exposed rag and knowledge apps (#238) TigahandGitHub 2026-07-02 17:00:44 -07:00
• 122fe5f94b feat(modules): detect exposed gpu inference servers (#236) TigahandGitHub 2026-07-02 17:00:41 -07:00
• e1c8e3948d feat(modules): detect exposed local llm runners (#235) TigahandGitHub 2026-07-02 17:00:38 -07:00
• 24bcab0a8f feat(modules): detect exposed openai-compatible llm servers (#233) TigahandGitHub 2026-07-02 17:00:35 -07:00
• 3a289a3ac4 feat(modules): add clickhouse and dgraph exposure modules (#258) TigahandGitHub 2026-07-02 13:22:24 -07:00
• 6e022d56d9 feat(modules): detect exposed ai orchestration platforms (#242) TigahandGitHub 2026-07-02 13:22:21 -07:00
• 1bb54393f1 feat(httpx): retry 429 and 503 with Retry-After backoff (#227) TigahandGitHub 2026-07-02 13:22:17 -07:00
• f97c67695d chore(deps): bump actions/checkout from 4 to 7 (#267) 3 people 2026-07-02 13:16:52 -07:00
• 7eb6603e77 feat(modules): add eureka and spring boot admin exposure modules (#263) TigahandGitHub 2026-07-02 12:56:34 -07:00