3 people 3e0029755e feat(scan): add tls certificate recon module (#274) ...

Add a -tls-cert scan that actively dials the target's tls port and mines the
leaf certificate: SAN entries become candidate subdomains, and issuer/validity
feed posture flags (self-signed, expired, expiring soon, wildcard). Unlike the
passive crt.sh and certspotter feeds this probes the target directly, so it
surfaces certs never logged to a public ct log at the cost of touching the
target. Self-signed detection compares raw issuer/subject der and verifies the
cert against its own key rather than CheckSignatureFrom, which false-negatives
on leaf certs that omit CA key-usage bits.

Co-authored-by: vmfunc <vmfunc.lc@gmail.com>

2026-07-22 22:35:51 +00:00

..

templates

feat(config): add scan templates via -template (#154)

2026-06-22 18:23:54 -07:00

config_test.go

feat: diff mode with json snapshot store

2026-06-10 16:39:04 -07:00

config.go

feat(scan): add tls certificate recon module (#274)

2026-07-22 22:35:51 +00:00

configfile_test.go

feat(config): add -config/-profile config file and profile overlays (#357)

2026-07-22 12:56:59 -07:00

configfile.go

feat(config): add -config/-profile config file and profile overlays (#357)

2026-07-22 12:56:59 -07:00

template_test.go

feat(config): add scan templates via -template (#154)

2026-06-22 18:23:54 -07:00

template.go

feat(config): add -config/-profile config file and profile overlays (#357)

2026-07-22 12:56:59 -07:00