TigahandGitHub c24617d16c feat(recon): add kubeflow pipelines and metaflow exposure modules (#290) ...

detect an anonymously reachable kubeflow pipelines apiserver, whose
same api accepts pipeline run submission with an attacker-supplied
workflow manifest (arbitrary container execution), and a metaflow
metadata service leaking flow and owner enumeration. match distinctive
snake_case json keys with status 200, fail closed on empty instances
to avoid the bare-substring false-positive class.

2026-07-22 12:46:15 -07:00

..

ai_inference_exposure_test.go

feat(recon): add localai and invokeai exposure modules (#289)

2026-07-22 12:46:06 -07:00

ai_orchestration_exposure_test.go

feat(modules): detect exposed ai orchestration platforms (#242)

2026-07-02 13:22:21 -07:00

alertmanager_exposure_test.go

feat(modules): add prometheus alertmanager exposure module (#256)

2026-07-02 12:56:18 -07:00

analytics_ui_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

app_config_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

argocd_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

attack_modes_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

automation_server_exposure_test.go

feat(modules): add jenkins and nifi exposure modules (#257)

2026-07-02 12:56:21 -07:00

bigdata_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

browser_grid_exposure_test.go

feat(modules): add selenium grid and selenoid exposure modules (#255)

2026-07-02 12:56:15 -07:00

bucket_listing_exposure_test.go

feat(modules): add s3, gcs and azure bucket listing modules (#288)

2026-07-22 12:45:57 -07:00

buildtool_credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

cicd_server_exposure_test.go

feat(modules): add concourse, woodpecker and gocd exposure modules (#250)

2026-07-02 12:56:01 -07:00

cms_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

data_orchestration_exposure_test.go

feat(modules): add dagster and mage exposure modules (#253)

2026-07-02 12:56:09 -07:00

data_pipeline_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

database_file_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

database_http_exposure_test.go

feat(modules): add clickhouse and dgraph exposure modules (#258)

2026-07-02 13:22:24 -07:00

db_browser_panel_exposure_test.go

feat(modules): add mongo-express, redis-commander and pgweb exposure (#278)

2026-07-22 12:36:01 -07:00

db_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

debug_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

deploy_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

directory_listing_exposure_test.go

fix(recon): tighten directory-listing matchers to real listing furniture (#284)

2026-07-22 12:45:29 -07:00

distributed_db_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

dotfile_credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

env_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

executor_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

executor.go

feat(modules): add disable-redirects http option (#273)

2026-07-22 12:35:36 -07:00

favicon_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

favicon.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

grafana_anonymous_exposure_test.go

feat(modules): add grafana anonymous access exposure module (#259)

2026-07-02 12:56:23 -07:00

hadoop_zookeeper_exposure_test.go

feat(modules): add zookeeper and hadoop namenode exposure modules (#262)

2026-07-02 12:56:31 -07:00

http_database_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

image_gen_exposure_test.go

feat(modules): detect exposed ai image generation servers (#241)

2026-07-02 12:55:44 -07:00

infra_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

infra_controlplane_exposure_test.go

feat(modules): add traefik, nomad and portainer exposure modules (#249)

2026-07-02 17:00:50 -07:00

job_dashboard_exposure_test.go

feat(modules): add sidekiq, flower and rq-dashboard exposure modules (#254)

2026-07-02 12:56:12 -07:00

json_extractor_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

kafka_ui_exposure_test.go

feat(modules): add kafka ui and kafdrop exposure modules (#261)

2026-07-02 12:56:29 -07:00

llm_gateway_exposure_test.go

feat(modules): detect exposed one-api llm gateway (#246)

2026-07-02 12:55:55 -07:00

llm_gpu_serving_exposure_test.go

feat(modules): detect exposed gpu inference servers (#236)

2026-07-02 17:00:41 -07:00

llm_inference_exposure_test.go

feat(modules): detect exposed huggingface inference servers (#234)

2026-07-02 12:55:36 -07:00

llm_local_runner_exposure_test.go

feat(modules): detect exposed local llm runners (#235)

2026-07-02 17:00:38 -07:00

llm_openai_compat_exposure_test.go

feat(modules): detect exposed openai-compatible llm servers (#233)

2026-07-02 17:00:35 -07:00

llm_rag_ui_exposure_test.go

feat(modules): detect exposed rag and knowledge apps (#238)

2026-07-02 17:00:44 -07:00

llm_ui_exposure_test.go

feat(modules): detect exposed llm chat frontends (#237)

2026-07-02 12:55:39 -07:00

loader_test.go

test(modules): cover matchers, extractors, loader and executor

2026-06-10 14:47:17 -07:00

loader.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

login_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

management_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

matchers_condition_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

matchers_test.go

feat(modules): add wordlist file support to http modules (#158)

2026-06-22 21:44:04 -07:00

metrics_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

ml_pipeline_exposure_test.go

feat(recon): add kubeflow pipelines and metaflow exposure modules (#290)

2026-07-22 12:46:15 -07:00

ml_platform_exposure_test.go

feat(modules): detect exposed data labeling tools (#239)

2026-07-02 12:55:41 -07:00

ml_platform_server_exposure_test.go

feat(modules): detect exposed ml platforms (#240)

2026-07-02 17:00:47 -07:00

ml_tracking_exposure_test.go

feat(modules): detect exposed ml experiment trackers (#243)

2026-07-02 12:55:47 -07:00

module.go

style: apply gofmt to source tree (#232)

2026-06-25 18:19:17 -07:00

n8n_settings_exposure_test.go

feat(modules): add n8n settings exposure module (#260)

2026-07-02 12:56:26 -07:00

nodered_flow_exposure_test.go

feat(modules): add node-red flow api exposure module (#251)

2026-07-02 12:56:04 -07:00

observability_exposure_test.go

feat(modules): add loki, jaeger and zipkin exposure modules (#248)

2026-07-02 12:55:58 -07:00

ops_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

orchestration_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

rails_secret_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

redirect_test.go

feat(modules): add disable-redirects http option (#273)

2026-07-22 12:35:36 -07:00

registry_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

registry.go

chore: bump copyright headers to 2026

2026-06-08 18:30:48 -07:00

runtime_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

secret_file_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

server_admin_exposure_test.go

feat(modules): add caddy and envoy admin exposure modules (#252)

2026-07-02 12:56:07 -07:00

service_registry_exposure_test.go

feat(modules): add eureka and spring boot admin exposure modules (#263)

2026-07-02 12:56:34 -07:00

speech_audio_exposure_test.go

feat(modules): detect exposed ai speech servers (#245)

2026-07-02 12:55:52 -07:00

telescope_exposure_test.go

feat(modules): add laravel telescope dashboard exposure module (#279)

2026-07-22 12:36:10 -07:00

vcs_metadata_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

vector_db_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

vector_search_exposure_test.go

feat(modules): detect exposed vector search engines (#244)

2026-07-02 12:55:50 -07:00

webserver_config_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

yaml.go

feat(modules): add disable-redirects http option (#273)

2026-07-22 12:35:36 -07:00