TigahandGitHub 3ecc7e6f95 fix(scan): correlate cname before confirming subdomain takeover (#281) ...

the live-response path flagged any host whose body matched a provider
fingerprint without checking dns, so a page merely containing a
provider 404 string was reported as a takeover. resolve the cname and
only confirm when it maps to the same provider; a contradicting cname
kills the flag. providers with a body signature but no apex to
correlate, and unresolvable lookups, degrade to a medium potential
finding via a new confidence field rather than confirming or dropping.

2026-07-22 12:36:19 -07:00

..

finding_test.go

style: apply gofmt to source tree (#232)

2026-06-25 18:19:17 -07:00

finding.go

fix(scan): correlate cname before confirming subdomain takeover (#281)

2026-07-22 12:36:19 -07:00

line_test.go

feat: pipe mode (stdin targets, naked-host, -silent plain output)

2026-06-10 15:50:58 -07:00

severity_test.go

feat(finding): normalized finding layer for notify and diff

2026-06-10 15:29:20 -07:00

severity.go

feat(finding): normalized finding layer for notify and diff

2026-06-10 15:29:20 -07:00