sif/internal at 3ecc7e6f956558f3ef24710d78a5ba61bed471c6 - sif

gitea-mirror/sif

Fork 0

mirror of https://github.com/lunchcat/sif.git synced 2026-07-28 14:37:01 -07:00

Files

T

History

TigahandGitHub 3ecc7e6f95 fix(scan): correlate cname before confirming subdomain takeover (#281 )

the live-response path flagged any host whose body matched a provider
fingerprint without checking dns, so a page merely containing a
provider 404 string was reported as a takeover. resolve the cname and
only confirm when it maps to the same provider; a contradicting cname
kills the flag. providers with a body signature but no apex to
correlate, and unresolvable lookups, degrade to a medium potential
finding via a new confidence field rather than confirming or dropping.

2026-07-22 12:36:19 -07:00

config

feat(scan): add -concurrency flag to scan targets in parallel (#367 )

2026-07-12 14:23:35 -07:00

dnsx

feat(dnslist): async dns resolution with wildcard filtering

2026-06-10 15:30:03 -07:00

finding

fix(scan): correlate cname before confirming subdomain takeover (#281 )

2026-07-22 12:36:19 -07:00

fingerprint

refactor(scan): extract favicon hashing into internal/fingerprint (#182 )