-
Notifications
You must be signed in to change notification settings - Fork 25
Open
Description
overview
currently sif has two systems for running scans:
- yaml modules - new modular system in
modules/directory - go scans - legacy scans in
internal/scan/
the goal is to eventually convert most go scans to yaml modules for consistency and user extensibility.
scans to convert
these go scans could be converted to yaml modules:
-
headers.go→modules/http/headers.yaml -
cms.go→modules/info/cms.yaml -
git.go→modules/recon/git.yaml(partially done with git-exposed.yaml) -
dirlist.go→modules/recon/dirlist.yaml -
dnslist.go→modules/dns/dnslist.yaml -
cloudstorage.go→modules/recon/cloudstorage.yaml -
sql.go→ enhance existing sqli modules -
lfi.go→ enhance existing lfi module
scans to keep as go
these are better suited as go code due to complexity:
shodan.go- api integration with external servicenuclei.go- external tool integrationwhois.go- external lookupsports.go- tcp scanning requires low-level networkingframeworks/- complex detection logic with version parsing
the go scans that stay should still be registered as modules in the module system so they show up in --list-modules and can be run with --modules flags.
Metadata
Metadata
Assignees
Labels
No labels