Skip to content

convert built-in scans to yaml modules #52

@vmfunc

Description

@vmfunc

overview

currently sif has two systems for running scans:

  1. yaml modules - new modular system in modules/ directory
  2. go scans - legacy scans in internal/scan/

the goal is to eventually convert most go scans to yaml modules for consistency and user extensibility.

scans to convert

these go scans could be converted to yaml modules:

  • headers.gomodules/http/headers.yaml
  • cms.gomodules/info/cms.yaml
  • git.gomodules/recon/git.yaml (partially done with git-exposed.yaml)
  • dirlist.gomodules/recon/dirlist.yaml
  • dnslist.gomodules/dns/dnslist.yaml
  • cloudstorage.gomodules/recon/cloudstorage.yaml
  • sql.go → enhance existing sqli modules
  • lfi.go → enhance existing lfi module

scans to keep as go

these are better suited as go code due to complexity:

  • shodan.go - api integration with external service
  • nuclei.go - external tool integration
  • whois.go - external lookups
  • ports.go - tcp scanning requires low-level networking
  • frameworks/ - complex detection logic with version parsing

the go scans that stay should still be registered as modules in the module system so they show up in --list-modules and can be run with --modules flags.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions