TigahandGitHub f6db61b0ef refactor: share path-resolution and body-cap helpers (#355) ...

* refactor: share one helper for the per-user sif config directory

the modules loader and the framework custom-signature loader each
hand-rolled the same ~/.config/sif/<sub> (and %LocalAppData%\sif\<sub>
on windows) path. extract internal/sifpath.UserSubdir and route both
through it so the per-user layout is defined in one place.

no behavior change: the helper reproduces the existing paths exactly.

* refactor: read capped response bodies through one httpx helper

the frameworks detector and the module executor each defined their own
5 MB body cap and ran the same io.ReadAll(io.LimitReader(...)) read. move
the cap and the read into httpx.MaxBodySize / httpx.ReadCappedBody so both
scanners share one ceiling instead of two consts that can drift.

no behavior change: the cap value and read semantics are unchanged.

2026-07-22 15:48:49 -07:00

..

ai_inference_exposure_test.go

feat(recon): add localai and invokeai exposure modules (#289)

2026-07-22 12:46:06 -07:00

ai_orchestration_exposure_test.go

feat(modules): detect exposed ai orchestration platforms (#242)

2026-07-02 13:22:21 -07:00

alertmanager_exposure_test.go

feat(modules): add prometheus alertmanager exposure module (#256)

2026-07-02 12:56:18 -07:00

analytics_ui_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

app_config_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

argocd_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

attack_modes_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

authentik_version_exposure_test.go

feat(modules): add vaultwarden, authentik and synapse version modules (#295)

2026-07-22 12:47:18 -07:00

automation_server_exposure_test.go

feat(modules): add jenkins and nifi exposure modules (#257)

2026-07-02 12:56:21 -07:00

bigdata_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

browser_grid_exposure_test.go

feat(modules): add selenium grid and selenoid exposure modules (#255)

2026-07-02 12:56:15 -07:00

bucket_listing_exposure_test.go

feat(modules): add s3, gcs and azure bucket listing modules (#288)

2026-07-22 12:45:57 -07:00

buildtool_credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

chain_test.go

feat(modules): add dynamic-variable request chaining (#317)

2026-07-22 22:45:50 +00:00

cicd_server_exposure_test.go

feat(modules): add concourse, woodpecker and gocd exposure modules (#250)

2026-07-02 12:56:01 -07:00

cms_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

crlf_ssi_injection_test.go

feat(modules): add crlf and ssi injection detection modules (#347)

2026-07-22 12:55:41 -07:00

data_orchestration_exposure_test.go

feat(modules): add dagster and mage exposure modules (#253)

2026-07-02 12:56:09 -07:00

data_pipeline_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

database_file_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

database_http_exposure_test.go

feat(modules): add clickhouse and dgraph exposure modules (#258)

2026-07-02 13:22:24 -07:00

db_browser_panel_exposure_test.go

feat(modules): add mongo-express, redis-commander and pgweb exposure (#278)

2026-07-22 12:36:01 -07:00

db_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

debug_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

dell_idrac_bmc_info_exposure_test.go

feat(modules): add hpe ilo, dell idrac and redfish exposure modules (#296)

2026-07-22 12:47:27 -07:00

deploy_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

directory_listing_exposure_test.go

fix(recon): tighten directory-listing matchers to real listing furniture (#284)

2026-07-22 12:45:29 -07:00

distributed_db_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

dotfile_credential_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

env_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

executor_test.go

feat(modules): add tcp module executor and recon modules (#308)

2026-07-22 12:49:22 -07:00

executor.go

refactor: share path-resolution and body-cap helpers (#355)

2026-07-22 15:48:49 -07:00

favicon_test.go

refactor(fingerprint): make the favicon tech table the single source (#358)

2026-07-22 12:57:09 -07:00

favicon.go

feat(modules): add a range matcher for response size or status (#362)

2026-07-22 22:40:58 +00:00

framework_introspection_exposure_test.go

feat(modules): add node inspector, rails routes and openapi exposure modules (#293)

2026-07-22 12:46:43 -07:00

grafana_anonymous_exposure_test.go

feat(modules): add grafana anonymous access exposure module (#259)

2026-07-02 12:56:23 -07:00

hadoop_zookeeper_exposure_test.go

feat(modules): add zookeeper and hadoop namenode exposure modules (#262)

2026-07-02 12:56:31 -07:00

haproxy_stats_exposure_test.go

feat(modules): add haproxy stats, nexus and pushgateway exposure modules (#301)

2026-07-22 12:48:13 -07:00

hpe_ilo_xmldata_exposure_test.go

feat(modules): add hpe ilo, dell idrac and redfish exposure modules (#296)

2026-07-22 12:47:27 -07:00

http_database_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

iac_ci_config_exposure_test.go

feat(modules): add terraform tfvars, ansible vault and ci config exposure modules (#299)

2026-07-22 12:47:54 -07:00

image_gen_exposure_test.go

feat(modules): detect exposed ai image generation servers (#241)

2026-07-02 12:55:44 -07:00

infra_config_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

infra_controlplane_exposure_test.go

feat(modules): add traefik, nomad and portainer exposure modules (#249)

2026-07-02 17:00:50 -07:00

job_dashboard_exposure_test.go

feat(modules): add sidekiq, flower and rq-dashboard exposure modules (#254)

2026-07-02 12:56:12 -07:00

json_extractor_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

kafka_ui_exposure_test.go

feat(modules): add kafka ui and kafdrop exposure modules (#261)

2026-07-02 12:56:29 -07:00

llm_gateway_exposure_test.go

feat(modules): detect exposed one-api llm gateway (#246)

2026-07-02 12:55:55 -07:00

llm_gpu_serving_exposure_test.go

feat(modules): detect exposed gpu inference servers (#236)

2026-07-02 17:00:41 -07:00

llm_inference_exposure_test.go

feat(modules): detect exposed huggingface inference servers (#234)

2026-07-02 12:55:36 -07:00

llm_local_runner_exposure_test.go

feat(modules): detect exposed local llm runners (#235)

2026-07-02 17:00:38 -07:00

llm_openai_compat_exposure_test.go

feat(modules): detect exposed openai-compatible llm servers (#233)

2026-07-02 17:00:35 -07:00

llm_rag_ui_exposure_test.go

feat(modules): detect exposed rag and knowledge apps (#238)

2026-07-02 17:00:44 -07:00

llm_ui_exposure_test.go

feat(modules): detect exposed llm chat frontends (#237)

2026-07-02 12:55:39 -07:00

loader_test.go

fix(modules): search system data dirs for built-in modules (#338)

2026-07-22 12:54:05 -07:00

loader.go

refactor: share path-resolution and body-cap helpers (#355)

2026-07-22 15:48:49 -07:00

login_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

mailadmin_fingerprint_test.go

feat(recon): add postfixadmin setup and panel fingerprints (#292)

2026-07-22 12:46:34 -07:00

management_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

matchers_condition_test.go

feat(modules): add tcp module executor and recon modules (#308)

2026-07-22 12:49:22 -07:00

matchers_range_test.go

feat(modules): add a range matcher for response size or status (#362)

2026-07-22 22:40:58 +00:00

matchers_test.go

fix(modules): guard regex extractor against negative group index (#346)

2026-07-22 12:55:32 -07:00

metrics_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

ml_pipeline_exposure_test.go

feat(recon): add kubeflow pipelines and metaflow exposure modules (#290)

2026-07-22 12:46:15 -07:00

ml_platform_exposure_test.go

feat(modules): detect exposed data labeling tools (#239)

2026-07-02 12:55:41 -07:00

ml_platform_server_exposure_test.go

feat(modules): detect exposed ml platforms (#240)

2026-07-02 17:00:47 -07:00

ml_tracking_exposure_test.go

feat(modules): detect exposed ml experiment trackers (#243)

2026-07-02 12:55:47 -07:00

module.go

feat(modules): add a range matcher for response size or status (#362)

2026-07-22 22:40:58 +00:00

n8n_settings_exposure_test.go

feat(modules): add n8n settings exposure module (#260)

2026-07-02 12:56:26 -07:00

nexus_repository_exposure_test.go

feat(modules): add haproxy stats, nexus and pushgateway exposure modules (#301)

2026-07-22 12:48:13 -07:00

nodered_flow_exposure_test.go

feat(modules): add node-red flow api exposure module (#251)

2026-07-02 12:56:04 -07:00

nsq_stats_exposure_test.go

feat(modules): add nsq and pulsar exposure modules (#297)

2026-07-22 12:47:36 -07:00

observability_exposure_test.go

feat(modules): add loki, jaeger and zipkin exposure modules (#248)

2026-07-02 12:55:58 -07:00

ops_panels_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

orchestration_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

otel_zpages_tracez_exposure_test.go

feat(modules): add grafana tempo and otel zpages exposure modules (#294)

2026-07-22 12:46:52 -07:00

pkgreg_exposure_test.go

feat(modules): add chartmuseum and verdaccio registry exposure modules (#300)

2026-07-22 12:48:03 -07:00

pulsar_metrics_exposure_test.go

feat(modules): add nsq and pulsar exposure modules (#297)

2026-07-22 12:47:36 -07:00

pushgateway_exposure_test.go

feat(modules): add haproxy stats, nexus and pushgateway exposure modules (#301)

2026-07-22 12:48:13 -07:00

rails_secret_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

redfish_service_root_test.go

feat(modules): add hpe ilo, dell idrac and redfish exposure modules (#296)

2026-07-22 12:47:27 -07:00

redirect_test.go

feat(modules): add disable-redirects http option (#273)

2026-07-22 12:35:36 -07:00

registry_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

registry.go

chore: bump copyright headers to 2026

2026-06-08 18:30:48 -07:00

remote_access_gateway_exposure_test.go

feat(modules): add guacamole and webmin login exposure modules (#298)

2026-07-22 12:47:45 -07:00

runtime_api_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

secret_file_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

server_admin_exposure_test.go

feat(modules): add caddy and envoy admin exposure modules (#252)

2026-07-02 12:56:07 -07:00

service_registry_exposure_test.go

feat(modules): add eureka and spring boot admin exposure modules (#263)

2026-07-02 12:56:34 -07:00

speech_audio_exposure_test.go

feat(modules): detect exposed ai speech servers (#245)

2026-07-02 12:55:52 -07:00

synapse_federation_version_exposure_test.go

feat(modules): add vaultwarden, authentik and synapse version modules (#295)

2026-07-22 12:47:18 -07:00

tcp_test.go

feat(modules): add tcp module executor and recon modules (#308)

2026-07-22 12:49:22 -07:00

tcp.go

fix(modules): pass case-insensitive flag to tcp word matcher (#373)

2026-07-22 13:25:04 -07:00

telescope_exposure_test.go

feat(modules): add laravel telescope dashboard exposure module (#279)

2026-07-22 12:36:10 -07:00

tempo_search_exposure_test.go

feat(modules): add grafana tempo and otel zpages exposure modules (#294)

2026-07-22 12:46:52 -07:00

vaultwarden_version_exposure_test.go

feat(modules): add vaultwarden, authentik and synapse version modules (#295)

2026-07-22 12:47:18 -07:00

vcs_metadata_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

vector_db_exposure_test.go

chore: migrate module path to github.com/vmfunc/sif (#194)

2026-06-22 22:25:39 -07:00

vector_search_exposure_test.go

feat(modules): detect exposed vector search engines (#244)

2026-07-02 12:55:50 -07:00

webmail_fingerprint_test.go

feat(info): add roundcube and zimbra webmail fingerprints (#291)

2026-07-22 12:46:24 -07:00

webserver_config_exposure_test.go

fix(modules): guard ignition, web.config and appsettings against soft-404 shells (#286)

2026-07-22 12:45:48 -07:00

yaml_fuzz_test.go

feat(fuzz): add fuzz harnesses for jwt, secrets and yaml parsing (#340)

2026-07-22 22:24:43 +00:00

yaml.go

feat(modules): add dynamic-variable request chaining (#317)

2026-07-22 22:45:50 +00:00