lunchcat / sif Goto Github PK

🚀 blazing-fast pentesting suite written in Go

License: Other

Go 97.14% Nix 2.09% Makefile 0.77%

attack-surface cve-scanner cve-scanning cybersecurity directory-enumeration dirlist dns-enumeration hacktoberfest infosec pentest

sif's People

Contributors

Stargazers

Watchers

Forkers

milebdo franko00007 maliqto macdoos greek yullptr hadi-codes aspenmayer

sif's Issues

Fetch file on 301 for robots.txt base scanning

chore: handle logging files a different way

This still has to be discussed, but logging is really managed badly as of now with each feature spawning its own logger. an optimized way of doing this would be to spawn the loader directly on sif.go, and would then facilitate API output.

Base scanning doesn't occur even when --noscan is present

License Incompatibility

I recently stumbled across the project and became interested in packaging it. As such, I reviewed the licenses of the project and its dependencies, and noticed that one of the dependencies pulled is licensed under the GPL-2.0, which is incompatible with the proprietary license of the project.

Note: The upstream project of that fork relicensed to MIT months ago, but the fork being pulled in is still GPL-2.0.

📁 feat: LFI Recon

security: Arbitrary file access during archive extraction ("Zip Slip")

Tracking issue for:

https://github.com/lunchcat/sif/security/code-scanning/1

🗃️ feat: Recon Templates (JSON)

Recon templates

Add the ability for users to set recon templates to automatically run a set of predefined scans, instead of having to use all the flags.

Usage example:

sif -t template.toml       // load template

sif -t minimal                // load default minimal template from runtime