3 people c2dbe4a19f feat(modules): add dynamic-variable request chaining (#317) ...

http modules could only fire independent one-shot requests: an extractor
recorded a value for reporting, but nothing could feed it back into a
later request. add a requests: chain where steps run in order sharing a
variable map, so a step's extractors populate {{name}} references in the
path, headers and body of later steps.

a step with matchers records a finding on a match and halts the chain on
a miss, so a login or setup step can gate an authenticated follow-up. the
single-request form is unchanged and stays the concurrent default when no
chain is defined.

Co-authored-by: vmfunc <vmfunc.lc@gmail.com>

2026-07-22 22:45:50 +00:00

..

ai_inference_exposure_test.go

feat(recon): add localai and invokeai exposure modules (#289)

2026-07-22 12:46:06 -07:00

ai_orchestration_exposure_test.go

feat(modules): detect exposed ai orchestration platforms (#242)

2026-07-02 13:22:21 -07:00

alertmanager_exposure_test.go

feat(modules): add prometheus alertmanager exposure module (#256)

2026-07-02 12:56:18 -07:00

analytics_ui_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

app_config_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

argocd_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

attack_modes_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

authentik_version_exposure_test.go

feat(modules): add vaultwarden, authentik and synapse version modules (#295)

2026-07-22 12:47:18 -07:00

automation_server_exposure_test.go

feat(modules): add jenkins and nifi exposure modules (#257)

2026-07-02 12:56:21 -07:00

bigdata_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

browser_grid_exposure_test.go

feat(modules): add selenium grid and selenoid exposure modules (#255)

2026-07-02 12:56:15 -07:00

bucket_listing_exposure_test.go

feat(modules): add s3, gcs and azure bucket listing modules (#288)

2026-07-22 12:45:57 -07:00

buildtool_credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

chain_test.go

feat(modules): add dynamic-variable request chaining (#317)

2026-07-22 22:45:50 +00:00

cicd_server_exposure_test.go

feat(modules): add concourse, woodpecker and gocd exposure modules (#250)

2026-07-02 12:56:01 -07:00

cms_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

crlf_ssi_injection_test.go

feat(modules): add crlf and ssi injection detection modules (#347)

2026-07-22 12:55:41 -07:00

data_orchestration_exposure_test.go

feat(modules): add dagster and mage exposure modules (#253)

2026-07-02 12:56:09 -07:00

data_pipeline_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

database_file_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

database_http_exposure_test.go

feat(modules): add clickhouse and dgraph exposure modules (#258)

2026-07-02 13:22:24 -07:00

db_browser_panel_exposure_test.go

feat(modules): add mongo-express, redis-commander and pgweb exposure (#278)

2026-07-22 12:36:01 -07:00

db_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

debug_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

dell_idrac_bmc_info_exposure_test.go

feat(modules): add hpe ilo, dell idrac and redfish exposure modules (#296)

2026-07-22 12:47:27 -07:00

deploy_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

directory_listing_exposure_test.go

fix(recon): tighten directory-listing matchers to real listing furniture (#284)

2026-07-22 12:45:29 -07:00

distributed_db_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

dotfile_credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

env_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

executor_test.go

feat(modules): add tcp module executor and recon modules (#308)

2026-07-22 12:49:22 -07:00

executor.go

feat(modules): add dynamic-variable request chaining (#317)

2026-07-22 22:45:50 +00:00

favicon_test.go

refactor(fingerprint): make the favicon tech table the single source (#358)

2026-07-22 12:57:09 -07:00

favicon.go

feat(modules): add a range matcher for response size or status (#362)

2026-07-22 22:40:58 +00:00

framework_introspection_exposure_test.go

feat(modules): add node inspector, rails routes and openapi exposure modules (#293)

2026-07-22 12:46:43 -07:00

grafana_anonymous_exposure_test.go

feat(modules): add grafana anonymous access exposure module (#259)

2026-07-02 12:56:23 -07:00

hadoop_zookeeper_exposure_test.go

feat(modules): add zookeeper and hadoop namenode exposure modules (#262)

2026-07-02 12:56:31 -07:00

haproxy_stats_exposure_test.go

feat(modules): add haproxy stats, nexus and pushgateway exposure modules (#301)

2026-07-22 12:48:13 -07:00

hpe_ilo_xmldata_exposure_test.go

feat(modules): add hpe ilo, dell idrac and redfish exposure modules (#296)

2026-07-22 12:47:27 -07:00

http_database_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

iac_ci_config_exposure_test.go

feat(modules): add terraform tfvars, ansible vault and ci config exposure modules (#299)

2026-07-22 12:47:54 -07:00

image_gen_exposure_test.go

feat(modules): detect exposed ai image generation servers (#241)

2026-07-02 12:55:44 -07:00

infra_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

infra_controlplane_exposure_test.go

feat(modules): add traefik, nomad and portainer exposure modules (#249)

2026-07-02 17:00:50 -07:00

job_dashboard_exposure_test.go

feat(modules): add sidekiq, flower and rq-dashboard exposure modules (#254)

2026-07-02 12:56:12 -07:00

json_extractor_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

kafka_ui_exposure_test.go

feat(modules): add kafka ui and kafdrop exposure modules (#261)

2026-07-02 12:56:29 -07:00

llm_gateway_exposure_test.go

feat(modules): detect exposed one-api llm gateway (#246)

2026-07-02 12:55:55 -07:00

llm_gpu_serving_exposure_test.go

feat(modules): detect exposed gpu inference servers (#236)

2026-07-02 17:00:41 -07:00

llm_inference_exposure_test.go

feat(modules): detect exposed huggingface inference servers (#234)

2026-07-02 12:55:36 -07:00

llm_local_runner_exposure_test.go

feat(modules): detect exposed local llm runners (#235)

2026-07-02 17:00:38 -07:00

llm_openai_compat_exposure_test.go

feat(modules): detect exposed openai-compatible llm servers (#233)

2026-07-02 17:00:35 -07:00

llm_rag_ui_exposure_test.go

feat(modules): detect exposed rag and knowledge apps (#238)

2026-07-02 17:00:44 -07:00

llm_ui_exposure_test.go

feat(modules): detect exposed llm chat frontends (#237)

2026-07-02 12:55:39 -07:00

loader_test.go

fix(modules): search system data dirs for built-in modules (#338)

2026-07-22 12:54:05 -07:00

loader.go

fix(modules): search system data dirs for built-in modules (#338)

2026-07-22 12:54:05 -07:00

login_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

mailadmin_fingerprint_test.go

feat(recon): add postfixadmin setup and panel fingerprints (#292)

2026-07-22 12:46:34 -07:00

management_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

matchers_condition_test.go

feat(modules): add tcp module executor and recon modules (#308)

2026-07-22 12:49:22 -07:00

matchers_range_test.go

feat(modules): add a range matcher for response size or status (#362)

2026-07-22 22:40:58 +00:00

matchers_test.go

fix(modules): guard regex extractor against negative group index (#346)

2026-07-22 12:55:32 -07:00

metrics_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

ml_pipeline_exposure_test.go

feat(recon): add kubeflow pipelines and metaflow exposure modules (#290)

2026-07-22 12:46:15 -07:00

ml_platform_exposure_test.go

feat(modules): detect exposed data labeling tools (#239)

2026-07-02 12:55:41 -07:00

ml_platform_server_exposure_test.go

feat(modules): detect exposed ml platforms (#240)

2026-07-02 17:00:47 -07:00

ml_tracking_exposure_test.go

feat(modules): detect exposed ml experiment trackers (#243)

2026-07-02 12:55:47 -07:00

module.go

feat(modules): add a range matcher for response size or status (#362)

2026-07-22 22:40:58 +00:00

n8n_settings_exposure_test.go

feat(modules): add n8n settings exposure module (#260)

2026-07-02 12:56:26 -07:00

nexus_repository_exposure_test.go

feat(modules): add haproxy stats, nexus and pushgateway exposure modules (#301)

2026-07-22 12:48:13 -07:00

nodered_flow_exposure_test.go

feat(modules): add node-red flow api exposure module (#251)

2026-07-02 12:56:04 -07:00

nsq_stats_exposure_test.go

feat(modules): add nsq and pulsar exposure modules (#297)

2026-07-22 12:47:36 -07:00

observability_exposure_test.go

feat(modules): add loki, jaeger and zipkin exposure modules (#248)

2026-07-02 12:55:58 -07:00

ops_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

orchestration_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

otel_zpages_tracez_exposure_test.go

feat(modules): add grafana tempo and otel zpages exposure modules (#294)

2026-07-22 12:46:52 -07:00

pkgreg_exposure_test.go

feat(modules): add chartmuseum and verdaccio registry exposure modules (#300)

2026-07-22 12:48:03 -07:00

pulsar_metrics_exposure_test.go

feat(modules): add nsq and pulsar exposure modules (#297)

2026-07-22 12:47:36 -07:00

pushgateway_exposure_test.go

feat(modules): add haproxy stats, nexus and pushgateway exposure modules (#301)

2026-07-22 12:48:13 -07:00

rails_secret_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

redfish_service_root_test.go

feat(modules): add hpe ilo, dell idrac and redfish exposure modules (#296)

2026-07-22 12:47:27 -07:00

redirect_test.go

feat(modules): add disable-redirects http option (#273)

2026-07-22 12:35:36 -07:00

registry_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

registry.go

chore: bump copyright headers to 2026

2026-06-08 18:30:48 -07:00

remote_access_gateway_exposure_test.go

feat(modules): add guacamole and webmin login exposure modules (#298)

2026-07-22 12:47:45 -07:00

runtime_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

secret_file_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

server_admin_exposure_test.go

feat(modules): add caddy and envoy admin exposure modules (#252)

2026-07-02 12:56:07 -07:00

service_registry_exposure_test.go

feat(modules): add eureka and spring boot admin exposure modules (#263)

2026-07-02 12:56:34 -07:00

speech_audio_exposure_test.go

feat(modules): detect exposed ai speech servers (#245)

2026-07-02 12:55:52 -07:00

synapse_federation_version_exposure_test.go

feat(modules): add vaultwarden, authentik and synapse version modules (#295)

2026-07-22 12:47:18 -07:00

tcp_test.go

feat(modules): add tcp module executor and recon modules (#308)

2026-07-22 12:49:22 -07:00

tcp.go

fix(modules): pass case-insensitive flag to tcp word matcher (#373)

2026-07-22 13:25:04 -07:00

telescope_exposure_test.go

feat(modules): add laravel telescope dashboard exposure module (#279)

2026-07-22 12:36:10 -07:00

tempo_search_exposure_test.go

feat(modules): add grafana tempo and otel zpages exposure modules (#294)

2026-07-22 12:46:52 -07:00

vaultwarden_version_exposure_test.go

feat(modules): add vaultwarden, authentik and synapse version modules (#295)

2026-07-22 12:47:18 -07:00

vcs_metadata_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

vector_db_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

vector_search_exposure_test.go

feat(modules): detect exposed vector search engines (#244)

2026-07-02 12:55:50 -07:00

webmail_fingerprint_test.go

feat(info): add roundcube and zimbra webmail fingerprints (#291)

2026-07-22 12:46:24 -07:00

webserver_config_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

yaml_fuzz_test.go

feat(fuzz): add fuzz harnesses for jwt, secrets and yaml parsing (#340)

2026-07-22 22:24:43 +00:00

yaml.go

feat(modules): add dynamic-variable request chaining (#317)

2026-07-22 22:45:50 +00:00