mirror of
https://github.com/lunchcat/sif.git
synced 2026-08-03 01:02:00 -07:00
TigahandGitHub
9be84be908
* refactor(config): extract registerFlags from Parse split flag registration into a registerFlags helper so callers, including tests, can build and inspect the flag set without parsing os.Args. pure move, no behavior change. * feat(config): add scan templates via -template wire up the existing -template flag to load a batch of scan settings from a built-in preset or a local yaml file, so a run does not have to pass every flag by hand. a value is a named preset (minimal, recon, full) embedded in the binary, or a path to a local yaml file keyed by flag long-names. it merges as the goflags config before parsing, so command-line flags still win and it replaces the ambient config for that run. implements #5.
29 lines
490 B
YAML
29 lines
490 B
YAML
# full: thorough and active, including intrusive probes that inject payloads
|
|
# (xss, sql, lfi, redirect). api-key scans (shodan, securitytrails) stay opt-in
|
|
# via their own flags.
|
|
passive: true
|
|
whois: true
|
|
dork: true
|
|
favicon: true
|
|
headers: true
|
|
security-headers: true
|
|
cms: true
|
|
framework: true
|
|
probe: true
|
|
git: true
|
|
js: true
|
|
nuclei: true
|
|
openapi: true
|
|
cors: true
|
|
jwt: true
|
|
c3: true
|
|
st: true
|
|
crawl: true
|
|
sql: true
|
|
lfi: true
|
|
xss: true
|
|
redirect: true
|
|
dirlist: large
|
|
dnslist: large
|
|
ports: full
|