Tigah 19eb3b4292 feat(modules): add prometheus alertmanager exposure module (#256) ...

add a recon module for an unauthenticated prometheus alertmanager: the
/api/v2/status endpoint answers without credentials and returns config.original,
the full running configuration, which discloses receiver integrations and any
embedded credentials such as slack, pagerduty and webhook urls and smtp
passwords, along with the build version and cluster peers; an instance behind an
authenticating proxy returns 401 and is not flagged.

2026-07-02 12:56:18 -07:00

..

http

feat(modules): add graphql introspection detection module (#139)

2026-06-22 17:53:28 -07:00

info

feat(modules): add favicon fingerprint demo module (#184)

2026-06-22 21:42:43 -07:00

recon

feat(modules): add prometheus alertmanager exposure module (#256)

2026-07-02 12:56:18 -07:00