Tigah 3a289a3ac4 feat(modules): add clickhouse and dgraph exposure modules (#258) ...

add recon modules for self-hosted databases whose http interface is reachable
without credentials: clickhouse runs arbitrary sql because the default user has
an empty password, confirmed here by reading the server version through the
http interface, and the open-source dgraph alpha has no authentication so its
/health endpoint discloses the cluster while /query and /admin read and drop
all data; a clickhouse that requires a password returns 403 and an alpha behind
an authenticating proxy returns 401 and neither is flagged.

2026-07-02 13:22:24 -07:00

..

aim-exposure.yaml

feat(modules): detect exposed ml experiment trackers (#243)

2026-07-02 12:55:47 -07:00

airflow-api-exposure.yaml

feat(modules): add airflow, flink and kafka connect exposure modules (#214)

2026-06-22 17:07:25 -07:00

alertmanager-status-exposure.yaml

feat(modules): add prometheus alertmanager exposure module (#256)

2026-07-02 12:56:18 -07:00

anythingllm-exposure.yaml

feat(modules): detect exposed llm chat frontends (#237)

2026-07-02 12:55:39 -07:00

appsettings-exposure.yaml

feat(modules): add spring, appsettings and wp-config exposure modules (#206)

2026-06-22 17:19:56 -07:00

arangodb-api-exposure.yaml

feat(modules): add influxdb, arangodb and neo4j exposure modules (#221)

2026-06-22 16:48:41 -07:00

argocd-api-exposure.yaml

feat(modules): add argo cd exposure module (#219)

2026-06-22 16:49:52 -07:00

automatic1111-api-exposure.yaml

feat(modules): detect exposed ai image generation servers (#241)

2026-07-02 12:55:44 -07:00

aws-credentials-exposure.yaml

feat(modules): add aws, npmrc and docker credential file exposure modules (#195)

2026-06-22 17:24:06 -07:00

backup-files.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00

bazaar-exposure.yaml

feat(modules): add svn, mercurial and bazaar exposure modules (#210)

2026-06-22 18:18:16 -07:00

caddy-admin-exposure.yaml

feat(modules): add caddy and envoy admin exposure modules (#252)

2026-07-02 12:56:07 -07:00

cadvisor-api-exposure.yaml

feat(modules): add netdata and cadvisor exposure modules (#217)

2026-06-22 19:52:30 -07:00

celery-flower-exposure.yaml

feat(modules): add sidekiq, flower and rq-dashboard exposure modules (#254)

2026-07-02 12:56:12 -07:00

chroma-api-exposure.yaml

feat(modules): add qdrant, weaviate and chroma exposure modules (#222)

2026-06-22 16:54:03 -07:00

clickhouse-http-exposure.yaml

feat(modules): add clickhouse and dgraph exposure modules (#258)

2026-07-02 13:22:24 -07:00

comfyui-api-exposure.yaml

feat(modules): detect exposed ai image generation servers (#241)

2026-07-02 12:55:44 -07:00

concourse-info-exposure.yaml

feat(modules): add concourse, woodpecker and gocd exposure modules (#250)

2026-07-02 12:56:01 -07:00

consul-api-exposure.yaml

feat(modules): add vault, consul and etcd api exposure modules (#207)

2026-06-22 17:13:07 -07:00

couchbase-api-exposure.yaml

feat(modules): add riak, couchbase and druid api exposure modules (#216)

2026-06-22 17:06:51 -07:00

couchdb-exposure.yaml

feat(modules): add couchdb exposure module (#152)

2026-06-22 17:41:17 -07:00

cvat-server-exposure.yaml

feat(modules): detect exposed data labeling tools (#239)

2026-07-02 12:55:41 -07:00

dagster-webserver-exposure.yaml

feat(modules): add dagster and mage exposure modules (#253)

2026-07-02 12:56:09 -07:00

determined-master-exposure.yaml

feat(modules): detect exposed ml experiment trackers (#243)

2026-07-02 12:55:47 -07:00

dgraph-api-exposure.yaml

feat(modules): add clickhouse and dgraph exposure modules (#258)

2026-07-02 13:22:24 -07:00

dify-console-exposure.yaml

feat(modules): detect exposed ai orchestration platforms (#242)

2026-07-02 13:22:21 -07:00

django-debug-exposure.yaml

feat(modules): add django debug page exposure module (#148)

2026-06-22 17:48:36 -07:00

docker-api-exposure.yaml

feat(modules): add docker, kubernetes and kubelet api exposure modules (#212)

2026-06-22 19:52:25 -07:00

docker-compose-exposure.yaml

feat(modules): add terraform, kubeconfig and compose exposure modules (#201)

2026-06-22 19:52:16 -07:00

docker-config-exposure.yaml

feat(modules): add aws, npmrc and docker credential file exposure modules (#195)

2026-06-22 17:24:06 -07:00

docker-registry-api-exposure.yaml

feat(modules): add docker registry and harbor exposure modules (#218)

2026-06-22 18:13:20 -07:00

druid-api-exposure.yaml

feat(modules): add riak, couchbase and druid api exposure modules (#216)

2026-06-22 17:06:51 -07:00

drupal-config-exposure.yaml

feat(modules): add joomla, drupal and magento config exposure modules (#211)

2026-06-22 18:21:32 -07:00

elasticsearch-exposure.yaml

feat(modules): add elasticsearch exposure module (#151)

2026-06-22 17:45:49 -07:00

env-file-exposure.yaml

feat(modules): add env file exposure module (#185)

2026-06-22 19:52:07 -07:00

envoy-admin-exposure.yaml

feat(modules): add caddy and envoy admin exposure modules (#252)

2026-07-02 12:56:07 -07:00

etcd-api-exposure.yaml

feat(modules): add vault, consul and etcd api exposure modules (#207)

2026-06-22 17:13:07 -07:00

eureka-registry-exposure.yaml

feat(modules): add eureka and spring boot admin exposure modules (#263)

2026-07-02 12:56:34 -07:00

flink-api-exposure.yaml

feat(modules): add airflow, flink and kafka connect exposure modules (#214)

2026-06-22 17:07:25 -07:00

fooocus-api-exposure.yaml

feat(modules): detect exposed ai image generation servers (#241)

2026-07-02 12:55:44 -07:00

ftpconfig-exposure.yaml

feat(modules): add editor sftp deploy config exposure modules (#198)

2026-06-22 17:19:43 -07:00

git-credentials-exposure.yaml

feat(modules): add private key, git and pypi secret exposure modules (#205)

2026-06-22 17:10:45 -07:00

git-exposed.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00

gocd-version-exposure.yaml

feat(modules): add concourse, woodpecker and gocd exposure modules (#250)

2026-07-02 12:56:01 -07:00

gradle-properties-exposure.yaml

feat(modules): add maven, gradle and nuget credential exposure modules (#209)

2026-06-22 19:52:21 -07:00

grafana-anonymous-exposure.yaml

feat(modules): add grafana anonymous access exposure module (#259)

2026-07-02 12:56:23 -07:00

hadoop-namenode-exposure.yaml

feat(modules): add zookeeper and hadoop namenode exposure modules (#262)

2026-07-02 12:56:31 -07:00

hadoop-yarn-api-exposure.yaml

feat(modules): add solr, spark and hadoop yarn api exposure modules (#213)

2026-06-22 16:49:38 -07:00

harbor-api-exposure.yaml

feat(modules): add docker registry and harbor exposure modules (#218)

2026-06-22 18:13:20 -07:00

htaccess-exposure.yaml

feat(modules): add htpasswd, web.config and htaccess exposure modules (#202)

2026-06-22 17:15:01 -07:00

htpasswd-exposure.yaml

feat(modules): add htpasswd, web.config and htaccess exposure modules (#202)

2026-06-22 17:15:01 -07:00

influxdb-api-exposure.yaml

feat(modules): add influxdb, arangodb and neo4j exposure modules (#221)

2026-06-22 16:48:41 -07:00

iopaint-api-exposure.yaml

feat(modules): detect exposed ai image generation servers (#241)

2026-07-02 12:55:44 -07:00

jaeger-query-exposure.yaml

feat(modules): add loki, jaeger and zipkin exposure modules (#248)

2026-07-02 12:55:58 -07:00

jenkins-api-exposure.yaml

feat(modules): add jenkins and nifi exposure modules (#257)

2026-07-02 12:56:21 -07:00

jolokia-api-exposure.yaml

feat(modules): add kong, jolokia and nats api exposure modules (#215)

2026-06-22 16:49:45 -07:00

joomla-config-exposure.yaml

feat(modules): add joomla, drupal and magento config exposure modules (#211)

2026-06-22 18:21:32 -07:00

jupyter-api-exposure.yaml

feat(modules): add metabase, zeppelin and jupyter exposure modules (#220)

2026-06-22 16:48:34 -07:00

kafdrop-exposure.yaml

feat(modules): add kafka ui and kafdrop exposure modules (#261)

2026-07-02 12:56:29 -07:00

kafka-connect-api-exposure.yaml

feat(modules): add airflow, flink and kafka connect exposure modules (#214)

2026-06-22 17:07:25 -07:00

kafka-ui-exposure.yaml

feat(modules): add kafka ui and kafdrop exposure modules (#261)

2026-07-02 12:56:29 -07:00

kong-api-exposure.yaml

feat(modules): add kong, jolokia and nats api exposure modules (#215)

2026-06-22 16:49:45 -07:00

kubeconfig-exposure.yaml

feat(modules): add terraform, kubeconfig and compose exposure modules (#201)

2026-06-22 19:52:16 -07:00

kubelet-api-exposure.yaml

feat(modules): add docker, kubernetes and kubelet api exposure modules (#212)

2026-06-22 19:52:25 -07:00

kubernetes-api-exposure.yaml

feat(modules): add docker, kubernetes and kubelet api exposure modules (#212)

2026-06-22 19:52:25 -07:00

label-studio-exposure.yaml

feat(modules): detect exposed data labeling tools (#239)

2026-07-02 12:55:41 -07:00

langflow-exposure.yaml

feat(modules): detect exposed ai orchestration platforms (#242)

2026-07-02 13:22:21 -07:00

laravel-ignition-exposure.yaml

feat(modules): add ignition, profiler and heapdump exposure modules (#196)

2026-06-22 18:29:10 -07:00

librechat-exposure.yaml

feat(modules): detect exposed llm chat frontends (#237)

2026-07-02 12:55:39 -07:00

loki-api-exposure.yaml

feat(modules): add loki, jaeger and zipkin exposure modules (#248)

2026-07-02 12:55:58 -07:00

mage-status-exposure.yaml

feat(modules): add dagster and mage exposure modules (#253)

2026-07-02 12:56:09 -07:00

magento-config-exposure.yaml

feat(modules): add joomla, drupal and magento config exposure modules (#211)

2026-06-22 18:21:32 -07:00

marqo-exposure.yaml

feat(modules): detect exposed vector search engines (#244)

2026-07-02 12:55:50 -07:00

maven-settings-exposure.yaml

feat(modules): add maven, gradle and nuget credential exposure modules (#209)

2026-06-22 19:52:21 -07:00

meilisearch-exposure.yaml

feat(modules): detect exposed vector search engines (#244)

2026-07-02 12:55:50 -07:00

mercurial-exposure.yaml

feat(modules): add svn, mercurial and bazaar exposure modules (#210)

2026-06-22 18:18:16 -07:00

metabase-api-exposure.yaml

feat(modules): add metabase, zeppelin and jupyter exposure modules (#220)

2026-06-22 16:48:34 -07:00

mlflow-api-exposure.yaml

feat(modules): detect exposed ml experiment trackers (#243)

2026-07-02 12:55:47 -07:00

mysql-client-config-exposure.yaml

feat(modules): add netrc, pgpass and my.cnf exposure modules (#208)

2026-06-22 18:15:51 -07:00

n8n-settings-exposure.yaml

feat(modules): add n8n settings exposure module (#260)

2026-07-02 12:56:26 -07:00

nats-api-exposure.yaml

feat(modules): add kong, jolokia and nats api exposure modules (#215)

2026-06-22 16:49:45 -07:00

neo4j-api-exposure.yaml

feat(modules): add influxdb, arangodb and neo4j exposure modules (#221)

2026-06-22 16:48:41 -07:00

netdata-api-exposure.yaml

feat(modules): add netdata and cadvisor exposure modules (#217)

2026-06-22 19:52:30 -07:00

netrc-exposure.yaml

feat(modules): add netrc, pgpass and my.cnf exposure modules (#208)

2026-06-22 18:15:51 -07:00

nextchat-config-exposure.yaml

feat(modules): detect exposed llm chat frontends (#237)

2026-07-02 12:55:39 -07:00

nifi-api-exposure.yaml

feat(modules): add jenkins and nifi exposure modules (#257)

2026-07-02 12:56:21 -07:00

nodered-flow-exposure.yaml

feat(modules): add node-red flow api exposure module (#251)

2026-07-02 12:56:04 -07:00

npmrc-exposure.yaml

feat(modules): add aws, npmrc and docker credential file exposure modules (#195)

2026-06-22 17:24:06 -07:00

nuget-config-exposure.yaml

feat(modules): add maven, gradle and nuget credential exposure modules (#209)

2026-06-22 19:52:21 -07:00

oneapi-status-exposure.yaml

feat(modules): detect exposed one-api llm gateway (#246)

2026-07-02 12:55:55 -07:00

open-webui-exposure.yaml

feat(modules): detect exposed llm chat frontends (#237)

2026-07-02 12:55:39 -07:00

pgpass-exposure.yaml

feat(modules): add netrc, pgpass and my.cnf exposure modules (#208)

2026-06-22 18:15:51 -07:00

phpinfo-exposure.yaml

feat(modules): add phpinfo exposure module (#145)

2026-06-22 18:08:12 -07:00

private-key-exposure.yaml

feat(modules): add private key, git and pypi secret exposure modules (#205)

2026-06-22 17:10:45 -07:00

prometheus-metrics-exposure.yaml

feat(modules): add prometheus metrics exposure module (#147)

2026-06-22 18:01:02 -07:00

pypirc-exposure.yaml

feat(modules): add private key, git and pypi secret exposure modules (#205)

2026-06-22 17:10:45 -07:00

qdrant-api-exposure.yaml

feat(modules): add qdrant, weaviate and chroma exposure modules (#222)

2026-06-22 16:54:03 -07:00

rails-database-yml-exposure.yaml

feat(modules): add rails config secret exposure modules (#199)

2026-06-22 17:19:50 -07:00

rails-master-key-exposure.yaml

feat(modules): add rails config secret exposure modules (#199)

2026-06-22 17:19:50 -07:00

rails-secrets-yml-exposure.yaml

feat(modules): add rails config secret exposure modules (#199)

2026-06-22 17:19:50 -07:00

ray-dashboard-exposure.yaml

feat(modules): detect exposed ai orchestration platforms (#242)

2026-07-02 13:22:21 -07:00

redis-dump-exposure.yaml

feat(modules): add sql dump, sqlite and redis rdb exposure modules (#204)

2026-06-22 17:07:15 -07:00

riak-api-exposure.yaml

feat(modules): add riak, couchbase and druid api exposure modules (#216)

2026-06-22 17:06:51 -07:00

rq-dashboard-exposure.yaml

feat(modules): add sidekiq, flower and rq-dashboard exposure modules (#254)

2026-07-02 12:56:12 -07:00

selenium-grid-exposure.yaml

feat(modules): add selenium grid and selenoid exposure modules (#255)

2026-07-02 12:56:15 -07:00

selenoid-exposure.yaml

feat(modules): add selenium grid and selenoid exposure modules (#255)

2026-07-02 12:56:15 -07:00

server-status-exposure.yaml

feat(modules): add server status page exposure module (#150)

2026-06-22 18:26:19 -07:00

sidekiq-web-exposure.yaml

feat(modules): add sidekiq, flower and rq-dashboard exposure modules (#254)

2026-07-02 12:56:12 -07:00

skypilot-api-exposure.yaml

feat(modules): detect exposed ai orchestration platforms (#242)

2026-07-02 13:22:21 -07:00

solr-api-exposure.yaml

feat(modules): add solr, spark and hadoop yarn api exposure modules (#213)

2026-06-22 16:49:38 -07:00

spark-api-exposure.yaml

feat(modules): add solr, spark and hadoop yarn api exposure modules (#213)

2026-06-22 16:49:38 -07:00

speaches-api-exposure.yaml

feat(modules): detect exposed ai speech servers (#245)

2026-07-02 12:55:52 -07:00

spring-actuator-exposure.yaml

feat(modules): add spring boot actuator exposure module (#144)

2026-06-22 18:23:48 -07:00

spring-application-config-exposure.yaml

feat(modules): add spring, appsettings and wp-config exposure modules (#206)

2026-06-22 17:19:56 -07:00

spring-boot-admin-exposure.yaml

feat(modules): add eureka and spring boot admin exposure modules (#263)

2026-07-02 12:56:34 -07:00

spring-heapdump-exposure.yaml

feat(modules): add ignition, profiler and heapdump exposure modules (#196)

2026-06-22 18:29:10 -07:00

sql-dump-exposure.yaml

feat(modules): add sql dump, sqlite and redis rdb exposure modules (#204)

2026-06-22 17:07:15 -07:00

sqlite-database-exposure.yaml

feat(modules): add sql dump, sqlite and redis rdb exposure modules (#204)

2026-06-22 17:07:15 -07:00

sublime-sftp-exposure.yaml

feat(modules): add editor sftp deploy config exposure modules (#198)

2026-06-22 17:19:43 -07:00

svn-exposure.yaml

feat(modules): add svn, mercurial and bazaar exposure modules (#210)

2026-06-22 18:18:16 -07:00

symfony-profiler-exposure.yaml

feat(modules): add ignition, profiler and heapdump exposure modules (#196)

2026-06-22 18:29:10 -07:00

tei-api-exposure.yaml

feat(modules): detect exposed huggingface inference servers (#234)

2026-07-02 12:55:36 -07:00

tensorboard-exposure.yaml

feat(modules): detect exposed ml experiment trackers (#243)

2026-07-02 12:55:47 -07:00

terraform-state-exposure.yaml

feat(modules): add terraform, kubeconfig and compose exposure modules (#201)

2026-06-22 19:52:16 -07:00

tgi-api-exposure.yaml

feat(modules): detect exposed huggingface inference servers (#234)

2026-07-02 12:55:36 -07:00

vault-api-exposure.yaml

feat(modules): add vault, consul and etcd api exposure modules (#207)

2026-06-22 17:13:07 -07:00

vespa-status-exposure.yaml

feat(modules): detect exposed vector search engines (#244)

2026-07-02 12:55:50 -07:00

vscode-sftp-exposure.yaml

feat(modules): add editor sftp deploy config exposure modules (#198)

2026-06-22 17:19:43 -07:00

weaviate-api-exposure.yaml

feat(modules): add qdrant, weaviate and chroma exposure modules (#222)

2026-06-22 16:54:03 -07:00

webconfig-exposure.yaml

feat(modules): add htpasswd, web.config and htaccess exposure modules (#202)

2026-06-22 17:15:01 -07:00

werkzeug-debugger-exposure.yaml

feat(modules): add werkzeug debugger exposure module (#149)

2026-06-22 17:58:22 -07:00

woodpecker-version-exposure.yaml

feat(modules): add concourse, woodpecker and gocd exposure modules (#250)

2026-07-02 12:56:01 -07:00

wp-config-backup-exposure.yaml

feat(modules): add spring, appsettings and wp-config exposure modules (#206)

2026-06-22 17:19:56 -07:00

xtts-api-server-exposure.yaml

feat(modules): detect exposed ai speech servers (#245)

2026-07-02 12:55:52 -07:00

zeppelin-api-exposure.yaml

feat(modules): add metabase, zeppelin and jupyter exposure modules (#220)

2026-06-22 16:48:34 -07:00

zipkin-exposure.yaml

feat(modules): add loki, jaeger and zipkin exposure modules (#248)

2026-07-02 12:55:58 -07:00

zookeeper-admin-exposure.yaml

feat(modules): add zookeeper and hadoop namenode exposure modules (#262)

2026-07-02 12:56:31 -07:00