From a5574cdbf04b7e27a3da21f037548888ae888319 Mon Sep 17 00:00:00 2001 From: TheTechromancer <20261699+TheTechromancer@users.noreply.github.com> Date: Mon, 13 Oct 2025 02:57:14 +0000 Subject: [PATCH] [create-pull-request] automated change --- docs/data/chord_graph/entities.json | 890 ++++++++++++++-------------- docs/data/chord_graph/rels.json | 744 +++++++++++------------ docs/modules/list_of_modules.md | 2 - docs/scanning/advanced.md | 2 +- docs/scanning/configuration.md | 5 - docs/scanning/events.md | 70 +-- docs/scanning/index.md | 46 +- docs/scanning/presets_list.md | 64 +- 8 files changed, 885 insertions(+), 938 deletions(-) diff --git a/docs/data/chord_graph/entities.json b/docs/data/chord_graph/entities.json index 22922288fb..c62b61028e 100644 --- a/docs/data/chord_graph/entities.json +++ b/docs/data/chord_graph/entities.json @@ -23,35 +23,35 @@ ] }, { - "id": 137, + "id": 136, "name": "AZURE_TENANT", "parent": 88888888, "consumes": [ - 136 + 135 ], "produces": [] }, { - "id": 43, + "id": 42, "name": "CODE_REPOSITORY", "parent": 88888888, "consumes": [ - 62, + 61, + 81, 82, - 83, - 87, - 89, - 123, - 144 + 86, + 88, + 122, + 143 ], "produces": [ - 42, - 63, - 81, + 41, + 62, + 80, + 83, 84, - 85, - 88, - 122 + 87, + 121 ] }, { @@ -76,50 +76,48 @@ 38, 39, 40, - 41, - 44, + 43, + 48, 49, 50, 51, 52, - 53, + 54, 55, 56, 57, 58, - 59, - 61, - 67, - 79, - 84, - 86, - 93, - 97, - 104, - 107, - 109, + 60, + 66, + 78, + 83, + 85, + 92, + 96, + 103, + 106, + 108, + 111, 112, - 113, + 116, 117, - 118, - 120, - 124, + 119, + 123, + 127, 128, 129, 130, 131, 132, - 133, - 136, + 135, + 138, 139, 140, - 141, - 143, - 147, + 142, + 146, + 149, 150, - 151, - 154, - 158 + 153 ], "produces": [ 6, @@ -130,41 +128,39 @@ 38, 39, 40, - 41, + 48, 49, - 50, - 52, + 51, + 54, 55, 56, 57, 58, 59, - 60, - 79, - 93, - 97, - 104, - 107, - 110, + 78, + 92, + 96, + 103, + 106, + 109, + 111, 112, - 113, - 117, - 124, - 128, + 116, + 123, + 127, + 129, 130, 131, - 132, - 136, + 135, + 137, 138, 139, - 140, - 143, + 142, + 146, 147, - 148, + 149, 150, - 151, - 154, - 158 + 153 ] }, { @@ -173,30 +169,30 @@ "parent": 88888888, "consumes": [ 22, - 136, - 141 + 135, + 140 ], "produces": [] }, { - "id": 45, + "id": 44, "name": "EMAIL_ADDRESS", "parent": 88888888, "consumes": [ - 68 + 67 ], "produces": [ - 44, - 51, - 57, - 61, - 67, - 86, - 97, - 118, - 129, - 133, - 138 + 43, + 50, + 56, + 60, + 66, + 85, + 96, + 117, + 128, + 132, + 137 ] }, { @@ -204,21 +200,21 @@ "name": "FILESYSTEM", "parent": 88888888, "consumes": [ - 72, - 103, - 144, - 145 + 71, + 102, + 143, + 144 ], "produces": [ 8, - 62, - 76, + 61, + 75, + 81, 82, - 83, - 87, - 103, - 123, - 145 + 86, + 102, + 122, + 144 ] }, { @@ -227,7 +223,7 @@ "parent": 88888888, "consumes": [ 15, - 156 + 155 ], "produces": [ 1, @@ -241,46 +237,46 @@ 33, 34, 37, - 81, - 88, - 92, - 94, - 96, - 105, - 108, + 80, + 87, + 91, + 93, + 95, + 104, + 107, + 109, 110, - 111, + 113, 114, - 115, + 124, 125, - 126, - 131, - 134, - 136, - 142, - 144, - 146, - 157 + 130, + 133, + 135, + 141, + 143, + 145, + 156 ] }, { - "id": 100, + "id": 99, "name": "GEOLOCATION", "parent": 88888888, "consumes": [], "produces": [ - 99, - 102 + 98, + 101 ] }, { - "id": 46, + "id": 45, "name": "HASHED_PASSWORD", "parent": 88888888, "consumes": [], "produces": [ - 44, - 51 + 43, + 50 ] }, { @@ -291,25 +287,25 @@ 1, 15, 27, - 66, - 69, - 76, - 88, - 94, + 65, + 68, + 75, + 87, + 93, + 107, 108, 109, - 110, + 113, 114, 115, - 116, - 136, - 142, - 144, - 153, - 157 + 135, + 141, + 143, + 152, + 156 ], "produces": [ - 95 + 94 ] }, { @@ -319,28 +315,28 @@ "consumes": [ 11, 15, - 99, + 98, + 100, 101, - 102, - 109, - 120, - 131, - 136 + 108, + 119, + 130, + 135 ], "produces": [ 15, - 60, - 101, - 136 + 59, + 100, + 135 ] }, { - "id": 121, + "id": 120, "name": "IP_RANGE", "parent": 88888888, "consumes": [ - 120, - 136 + 119, + 135 ], "produces": [] }, @@ -352,7 +348,7 @@ 8 ], "produces": [ - 89 + 88 ] }, { @@ -361,95 +357,95 @@ "parent": 88888888, "consumes": [ 15, - 77, - 95, - 109, - 119, - 138 + 76, + 94, + 108, + 118, + 137 ], "produces": [ 15, - 120, - 131, - 136 + 119, + 130, + 135 ] }, { - "id": 64, + "id": 63, "name": "ORG_STUB", "parent": 88888888, "consumes": [ - 63, - 85, - 89, - 122 + 62, + 84, + 88, + 121 ], "produces": [ - 136 + 135 ] }, { - "id": 47, + "id": 46, "name": "PASSWORD", "parent": 88888888, "consumes": [], "produces": [ - 44, - 51 + 43, + 50 ] }, { - "id": 78, + "id": 77, "name": "PROTOCOL", "parent": 88888888, "consumes": [ - 106, - 109 + 105, + 108 ], "produces": [ - 77 + 76 ] }, { - "id": 54, + "id": 53, "name": "RAW_DNS_RECORD", "parent": 88888888, "consumes": [], "produces": [ - 53, - 60, - 61 + 52, + 59, + 60 ] }, { - "id": 70, + "id": 69, "name": "RAW_TEXT", "parent": 88888888, "consumes": [ - 69, - 144 + 68, + 143 ], "produces": [ - 72 + 71 ] }, { - "id": 65, + "id": 64, "name": "SOCIAL", "parent": 88888888, "consumes": [ - 63, - 85, - 88, - 90, - 122, - 136 + 62, + 84, + 87, + 89, + 121, + 135 ], "produces": [ - 63, - 86, - 88, - 135 + 62, + 85, + 87, + 134 ] }, { @@ -464,7 +460,7 @@ 32, 33, 34, - 136 + 135 ], "produces": [ 29, @@ -480,19 +476,19 @@ "parent": 88888888, "consumes": [ 15, - 88, - 156, - 157 + 87, + 155, + 156 ], "produces": [ 27, - 66, - 88, - 90, - 111, - 131, - 153, - 157 + 65, + 87, + 89, + 110, + 130, + 152, + 156 ] }, { @@ -505,40 +501,40 @@ 15, 24, 37, - 73, + 72, + 79, 80, - 81, - 90, - 92, - 95, - 98, - 105, + 89, + 91, + 94, + 97, + 104, + 109, 110, - 111, - 119, - 127, - 134, - 136, - 142, - 146, - 148, - 152, - 156 + 118, + 126, + 133, + 135, + 141, + 145, + 147, + 151, + 155 ], "produces": [ - 90, - 95 + 89, + 94 ] }, { - "id": 75, + "id": 74, "name": "URL_HINT", "parent": 88888888, "consumes": [ - 74 + 73 ], "produces": [ - 98 + 97 ] }, { @@ -546,57 +542,57 @@ "name": "URL_UNVERIFIED", "parent": 88888888, "consumes": [ - 42, - 76, - 95, - 112, - 119, - 126, - 135, - 136 + 41, + 75, + 94, + 111, + 118, + 125, + 134, + 135 ], "produces": [ 19, 28, 32, - 53, - 57, - 61, - 63, - 69, + 52, + 56, + 60, + 62, + 68, + 72, 73, - 74, - 84, - 90, - 97, - 127, - 129, - 147, - 154, - 157 + 83, + 89, + 96, + 126, + 128, + 146, + 153, + 156 ] }, { - "id": 48, + "id": 47, "name": "USERNAME", "parent": 88888888, "consumes": [ - 136 + 135 ], "produces": [ - 44, - 51 + 43, + 50 ] }, { - "id": 149, + "id": 148, "name": "VHOST", "parent": 88888888, "consumes": [ - 156 + 155 ], "produces": [ - 148 + 147 ] }, { @@ -605,7 +601,7 @@ "parent": 88888888, "consumes": [ 15, - 156 + 155 ], "produces": [ 1, @@ -614,15 +610,15 @@ 24, 26, 27, - 66, - 80, + 65, + 79, + 104, 105, - 106, - 111, - 131, - 142, - 144, - 157 + 110, + 130, + 141, + 143, + 156 ] }, { @@ -633,36 +629,36 @@ 15 ], "produces": [ - 152 + 151 ] }, { - "id": 91, + "id": 90, "name": "WEBSCREENSHOT", "parent": 88888888, "consumes": [], "produces": [ - 90 + 89 ] }, { - "id": 71, + "id": 70, "name": "WEB_PARAMETER", "parent": 88888888, "consumes": [ - 96, - 105, + 95, + 104, + 113, 114, 115, - 116, - 125, - 155 + 124, + 154 ], "produces": [ - 69, + 68, + 113, 114, - 115, - 116 + 115 ] }, { @@ -949,17 +945,6 @@ }, { "id": 39, - "name": "censys", - "parent": 99999999, - "consumes": [ - 7 - ], - "produces": [ - 7 - ] - }, - { - "id": 40, "name": "certspotter", "parent": 99999999, "consumes": [ @@ -970,7 +955,7 @@ ] }, { - "id": 41, + "id": 40, "name": "chaos", "parent": 99999999, "consumes": [ @@ -981,32 +966,32 @@ ] }, { - "id": 42, + "id": 41, "name": "code_repository", "parent": 99999999, "consumes": [ 20 ], "produces": [ - 43 + 42 ] }, { - "id": 44, + "id": 43, "name": "credshed", "parent": 99999999, "consumes": [ 7 ], "produces": [ + 44, 45, 46, - 47, - 48 + 47 ] }, { - "id": 49, + "id": 48, "name": "crt", "parent": 99999999, "consumes": [ @@ -1017,7 +1002,7 @@ ] }, { - "id": 50, + "id": 49, "name": "crt_db", "parent": 99999999, "consumes": [ @@ -1028,21 +1013,21 @@ ] }, { - "id": 51, + "id": 50, "name": "dehashed", "parent": 99999999, "consumes": [ 7 ], "produces": [ + 44, 45, 46, - 47, - 48 + 47 ] }, { - "id": 52, + "id": 51, "name": "digitorus", "parent": 99999999, "consumes": [ @@ -1053,19 +1038,19 @@ ] }, { - "id": 53, + "id": 52, "name": "dnsbimi", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 54, + 53, 20 ] }, { - "id": 55, + "id": 54, "name": "dnsbrute", "parent": 99999999, "consumes": [ @@ -1076,7 +1061,7 @@ ] }, { - "id": 56, + "id": 55, "name": "dnsbrute_mutations", "parent": 99999999, "consumes": [ @@ -1087,7 +1072,7 @@ ] }, { - "id": 57, + "id": 56, "name": "dnscaa", "parent": 99999999, "consumes": [ @@ -1095,12 +1080,12 @@ ], "produces": [ 7, - 45, + 44, 20 ] }, { - "id": 58, + "id": 57, "name": "dnscommonsrv", "parent": 99999999, "consumes": [ @@ -1111,7 +1096,7 @@ ] }, { - "id": 59, + "id": 58, "name": "dnsdumpster", "parent": 99999999, "consumes": [ @@ -1122,56 +1107,56 @@ ] }, { - "id": 60, + "id": 59, "name": "dnsresolve", "parent": 99999999, "consumes": [], "produces": [ 7, 12, - 54 + 53 ] }, { - "id": 61, + "id": 60, "name": "dnstlsrpt", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 45, - 54, + 44, + 53, 20 ] }, { - "id": 62, + "id": 61, "name": "docker_pull", "parent": 99999999, "consumes": [ - 43 + 42 ], "produces": [ 10 ] }, { - "id": 63, + "id": 62, "name": "dockerhub", "parent": 99999999, "consumes": [ - 64, - 65 + 63, + 64 ], "produces": [ - 43, - 65, + 42, + 64, 20 ] }, { - "id": 66, + "id": 65, "name": "dotnetnuke", "parent": 99999999, "consumes": [ @@ -1183,51 +1168,51 @@ ] }, { - "id": 67, + "id": 66, "name": "emailformat", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 45 + 44 ] }, { - "id": 68, + "id": 67, "name": "emails", "parent": 99999999, "consumes": [ - 45 + 44 ], "produces": [] }, { - "id": 69, + "id": 68, "name": "excavate", "parent": 99999999, "consumes": [ 2, - 70 + 69 ], "produces": [ 20, - 71 + 70 ] }, { - "id": 72, + "id": 71, "name": "extractous", "parent": 99999999, "consumes": [ 10 ], "produces": [ - 70 + 69 ] }, { - "id": 73, + "id": 72, "name": "ffuf", "parent": 99999999, "consumes": [ @@ -1238,18 +1223,18 @@ ] }, { - "id": 74, + "id": 73, "name": "ffuf_shortnames", "parent": 99999999, "consumes": [ - 75 + 74 ], "produces": [ 20 ] }, { - "id": 76, + "id": 75, "name": "filedownload", "parent": 99999999, "consumes": [ @@ -1261,18 +1246,18 @@ ] }, { - "id": 77, + "id": 76, "name": "fingerprintx", "parent": 99999999, "consumes": [ 16 ], "produces": [ - 78 + 77 ] }, { - "id": 79, + "id": 78, "name": "fullhunt", "parent": 99999999, "consumes": [ @@ -1283,7 +1268,7 @@ ] }, { - "id": 80, + "id": 79, "name": "generic_ssrf", "parent": 99999999, "consumes": [ @@ -1294,131 +1279,131 @@ ] }, { - "id": 81, + "id": 80, "name": "git", "parent": 99999999, "consumes": [ 3 ], "produces": [ - 43, + 42, 4 ] }, { - "id": 82, + "id": 81, "name": "git_clone", "parent": 99999999, "consumes": [ - 43 + 42 ], "produces": [ 10 ] }, { - "id": 83, + "id": 82, "name": "gitdumper", "parent": 99999999, "consumes": [ - 43 + 42 ], "produces": [ 10 ] }, { - "id": 84, + "id": 83, "name": "github_codesearch", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 43, + 42, 20 ] }, { - "id": 85, + "id": 84, "name": "github_org", "parent": 99999999, "consumes": [ - 64, - 65 + 63, + 64 ], "produces": [ - 43 + 42 ] }, { - "id": 86, + "id": 85, "name": "github_usersearch", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 45, - 65 + 44, + 64 ] }, { - "id": 87, + "id": 86, "name": "github_workflows", "parent": 99999999, "consumes": [ - 43 + 42 ], "produces": [ 10 ] }, { - "id": 88, + "id": 87, "name": "gitlab", "parent": 99999999, "consumes": [ 2, - 65, + 64, 17 ], "produces": [ - 43, + 42, 4, - 65, + 64, 17 ] }, { - "id": 89, + "id": 88, "name": "google_playstore", "parent": 99999999, "consumes": [ - 43, - 64 + 42, + 63 ], "produces": [ 9 ] }, { - "id": 90, + "id": 89, "name": "gowitness", "parent": 99999999, "consumes": [ - 65, + 64, 3 ], "produces": [ 17, 3, 20, - 91 + 90 ] }, { - "id": 92, + "id": 91, "name": "graphql_introspection", "parent": 99999999, "consumes": [ @@ -1429,7 +1414,7 @@ ] }, { - "id": 93, + "id": 92, "name": "hackertarget", "parent": 99999999, "consumes": [ @@ -1440,7 +1425,7 @@ ] }, { - "id": 94, + "id": 93, "name": "host_header", "parent": 99999999, "consumes": [ @@ -1451,7 +1436,7 @@ ] }, { - "id": 95, + "id": 94, "name": "httpx", "parent": 99999999, "consumes": [ @@ -1465,18 +1450,18 @@ ] }, { - "id": 96, + "id": 95, "name": "hunt", "parent": 99999999, "consumes": [ - 71 + 70 ], "produces": [ 4 ] }, { - "id": 97, + "id": 96, "name": "hunterio", "parent": 99999999, "consumes": [ @@ -1484,34 +1469,34 @@ ], "produces": [ 7, - 45, + 44, 20 ] }, { - "id": 98, + "id": 97, "name": "iis_shortnames", "parent": 99999999, "consumes": [ 3 ], "produces": [ - 75 + 74 ] }, { - "id": 99, + "id": 98, "name": "ip2location", "parent": 99999999, "consumes": [ 12 ], "produces": [ - 100 + 99 ] }, { - "id": 101, + "id": 100, "name": "ipneighbor", "parent": 99999999, "consumes": [ @@ -1522,18 +1507,18 @@ ] }, { - "id": 102, + "id": 101, "name": "ipstack", "parent": 99999999, "consumes": [ 12 ], "produces": [ - 100 + 99 ] }, { - "id": 103, + "id": 102, "name": "jadx", "parent": 99999999, "consumes": [ @@ -1544,7 +1529,7 @@ ] }, { - "id": 104, + "id": 103, "name": "leakix", "parent": 99999999, "consumes": [ @@ -1555,12 +1540,12 @@ ] }, { - "id": 105, + "id": 104, "name": "lightfuzz", "parent": 99999999, "consumes": [ 3, - 71 + 70 ], "produces": [ 4, @@ -1568,18 +1553,18 @@ ] }, { - "id": 106, + "id": 105, "name": "medusa", "parent": 99999999, "consumes": [ - 78 + 77 ], "produces": [ 5 ] }, { - "id": 107, + "id": 106, "name": "myssl", "parent": 99999999, "consumes": [ @@ -1590,7 +1575,7 @@ ] }, { - "id": 108, + "id": 107, "name": "newsletters", "parent": 99999999, "consumes": [ @@ -1601,7 +1586,7 @@ ] }, { - "id": 109, + "id": 108, "name": "nmap_xml", "parent": 99999999, "consumes": [ @@ -1609,12 +1594,12 @@ 2, 12, 16, - 78 + 77 ], "produces": [] }, { - "id": 110, + "id": 109, "name": "ntlm", "parent": 99999999, "consumes": [ @@ -1627,7 +1612,7 @@ ] }, { - "id": 111, + "id": 110, "name": "nuclei", "parent": 99999999, "consumes": [ @@ -1640,7 +1625,7 @@ ] }, { - "id": 112, + "id": 111, "name": "oauth", "parent": 99999999, "consumes": [ @@ -1652,7 +1637,7 @@ ] }, { - "id": 113, + "id": 112, "name": "otx", "parent": 99999999, "consumes": [ @@ -1663,45 +1648,45 @@ ] }, { - "id": 114, + "id": 113, "name": "paramminer_cookies", "parent": 99999999, "consumes": [ 2, - 71 + 70 ], "produces": [ 4, - 71 + 70 ] }, { - "id": 115, + "id": 114, "name": "paramminer_getparams", "parent": 99999999, "consumes": [ 2, - 71 + 70 ], "produces": [ 4, - 71 + 70 ] }, { - "id": 116, + "id": 115, "name": "paramminer_headers", "parent": 99999999, "consumes": [ 2, - 71 + 70 ], "produces": [ - 71 + 70 ] }, { - "id": 117, + "id": 116, "name": "passivetotal", "parent": 99999999, "consumes": [ @@ -1712,18 +1697,18 @@ ] }, { - "id": 118, + "id": 117, "name": "pgp", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 45 + 44 ] }, { - "id": 119, + "id": 118, "name": "portfilter", "parent": 99999999, "consumes": [ @@ -1734,43 +1719,43 @@ "produces": [] }, { - "id": 120, + "id": 119, "name": "portscan", "parent": 99999999, "consumes": [ 7, 12, - 121 + 120 ], "produces": [ 16 ] }, { - "id": 122, + "id": 121, "name": "postman", "parent": 99999999, "consumes": [ - 64, - 65 + 63, + 64 ], "produces": [ - 43 + 42 ] }, { - "id": 123, + "id": 122, "name": "postman_download", "parent": 99999999, "consumes": [ - 43 + 42 ], "produces": [ 10 ] }, { - "id": 124, + "id": 123, "name": "rapiddns", "parent": 99999999, "consumes": [ @@ -1781,18 +1766,18 @@ ] }, { - "id": 125, + "id": 124, "name": "reflected_parameters", "parent": 99999999, "consumes": [ - 71 + 70 ], "produces": [ 4 ] }, { - "id": 126, + "id": 125, "name": "retirejs", "parent": 99999999, "consumes": [ @@ -1803,7 +1788,7 @@ ] }, { - "id": 127, + "id": 126, "name": "robots", "parent": 99999999, "consumes": [ @@ -1814,7 +1799,7 @@ ] }, { - "id": 128, + "id": 127, "name": "securitytrails", "parent": 99999999, "consumes": [ @@ -1825,19 +1810,19 @@ ] }, { - "id": 129, + "id": 128, "name": "securitytxt", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 45, + 44, 20 ] }, { - "id": 130, + "id": 129, "name": "shodan_dns", "parent": 99999999, "consumes": [ @@ -1848,7 +1833,7 @@ ] }, { - "id": 131, + "id": 130, "name": "shodan_idb", "parent": 99999999, "consumes": [ @@ -1864,7 +1849,7 @@ ] }, { - "id": 132, + "id": 131, "name": "sitedossier", "parent": 99999999, "consumes": [ @@ -1875,18 +1860,18 @@ ] }, { - "id": 133, + "id": 132, "name": "skymem", "parent": 99999999, "consumes": [ 7 ], "produces": [ - 45 + 44 ] }, { - "id": 134, + "id": 133, "name": "smuggler", "parent": 99999999, "consumes": [ @@ -1897,43 +1882,43 @@ ] }, { - "id": 135, + "id": 134, "name": "social", "parent": 99999999, "consumes": [ 20 ], "produces": [ - 65 + 64 ] }, { - "id": 136, + "id": 135, "name": "speculate", "parent": 99999999, "consumes": [ - 137, + 136, 7, 23, 2, 12, - 121, - 65, + 120, + 64, 25, 3, 20, - 48 + 47 ], "produces": [ 7, 4, 12, 16, - 64 + 63 ] }, { - "id": 138, + "id": 137, "name": "sslcert", "parent": 99999999, "consumes": [ @@ -1941,11 +1926,11 @@ ], "produces": [ 7, - 45 + 44 ] }, { - "id": 139, + "id": 138, "name": "subdomaincenter", "parent": 99999999, "consumes": [ @@ -1956,7 +1941,7 @@ ] }, { - "id": 140, + "id": 139, "name": "subdomainradar", "parent": 99999999, "consumes": [ @@ -1967,7 +1952,7 @@ ] }, { - "id": 141, + "id": 140, "name": "subdomains", "parent": 99999999, "consumes": [ @@ -1977,7 +1962,7 @@ "produces": [] }, { - "id": 142, + "id": 141, "name": "telerik", "parent": 99999999, "consumes": [ @@ -1990,7 +1975,7 @@ ] }, { - "id": 143, + "id": 142, "name": "trickest", "parent": 99999999, "consumes": [ @@ -2001,14 +1986,14 @@ ] }, { - "id": 144, + "id": 143, "name": "trufflehog", "parent": 99999999, "consumes": [ - 43, + 42, 10, 2, - 70 + 69 ], "produces": [ 4, @@ -2016,7 +2001,7 @@ ] }, { - "id": 145, + "id": 144, "name": "unarchive", "parent": 99999999, "consumes": [ @@ -2027,7 +2012,7 @@ ] }, { - "id": 146, + "id": 145, "name": "url_manipulation", "parent": 99999999, "consumes": [ @@ -2038,7 +2023,7 @@ ] }, { - "id": 147, + "id": 146, "name": "urlscan", "parent": 99999999, "consumes": [ @@ -2050,7 +2035,7 @@ ] }, { - "id": 148, + "id": 147, "name": "vhost", "parent": 99999999, "consumes": [ @@ -2058,11 +2043,11 @@ ], "produces": [ 7, - 149 + 148 ] }, { - "id": 150, + "id": 149, "name": "viewdns", "parent": 99999999, "consumes": [ @@ -2073,7 +2058,7 @@ ] }, { - "id": 151, + "id": 150, "name": "virustotal", "parent": 99999999, "consumes": [ @@ -2084,7 +2069,7 @@ ] }, { - "id": 152, + "id": 151, "name": "wafw00f", "parent": 99999999, "consumes": [ @@ -2095,7 +2080,7 @@ ] }, { - "id": 153, + "id": 152, "name": "wappalyzer", "parent": 99999999, "consumes": [ @@ -2106,7 +2091,7 @@ ] }, { - "id": 154, + "id": 153, "name": "wayback", "parent": 99999999, "consumes": [ @@ -2118,29 +2103,29 @@ ] }, { - "id": 155, + "id": 154, "name": "web_parameters", "parent": 99999999, "consumes": [ - 71 + 70 ], "produces": [] }, { - "id": 156, + "id": 155, "name": "web_report", "parent": 99999999, "consumes": [ 4, 17, 3, - 149, + 148, 5 ], "produces": [] }, { - "id": 157, + "id": 156, "name": "wpscan", "parent": 99999999, "consumes": [ @@ -2153,16 +2138,5 @@ 20, 5 ] - }, - { - "id": 158, - "name": "zoomeye", - "parent": 99999999, - "consumes": [ - 7 - ], - "produces": [ - 7 - ] } ] \ No newline at end of file diff --git a/docs/data/chord_graph/rels.json b/docs/data/chord_graph/rels.json index 03e829ca52..bed01ffdbe 100644 --- a/docs/data/chord_graph/rels.json +++ b/docs/data/chord_graph/rels.json @@ -396,47 +396,47 @@ }, { "source": 41, - "target": 7, + "target": 20, "type": "consumes" }, { - "source": 7, + "source": 42, "target": 41, "type": "produces" }, - { - "source": 42, - "target": 20, - "type": "consumes" - }, { "source": 43, - "target": 42, - "type": "produces" + "target": 7, + "type": "consumes" }, { "source": 44, - "target": 7, - "type": "consumes" + "target": 43, + "type": "produces" }, { "source": 45, - "target": 44, + "target": 43, "type": "produces" }, { "source": 46, - "target": 44, + "target": 43, "type": "produces" }, { "source": 47, - "target": 44, + "target": 43, "type": "produces" }, { "source": 48, - "target": 44, + "target": 7, + "type": "consumes" + }, + { + "source": 7, + "target": 48, "type": "produces" }, { @@ -455,1413 +455,1393 @@ "type": "consumes" }, { - "source": 7, + "source": 44, "target": 50, "type": "produces" }, - { - "source": 51, - "target": 7, - "type": "consumes" - }, { "source": 45, - "target": 51, + "target": 50, "type": "produces" }, { "source": 46, - "target": 51, + "target": 50, "type": "produces" }, { "source": 47, - "target": 51, - "type": "produces" - }, - { - "source": 48, - "target": 51, + "target": 50, "type": "produces" }, { - "source": 52, + "source": 51, "target": 7, "type": "consumes" }, { "source": 7, - "target": 52, + "target": 51, "type": "produces" }, { - "source": 53, + "source": 52, "target": 7, "type": "consumes" }, { - "source": 54, - "target": 53, + "source": 53, + "target": 52, "type": "produces" }, { "source": 20, - "target": 53, + "target": 52, "type": "produces" }, { - "source": 55, + "source": 54, "target": 7, "type": "consumes" }, { "source": 7, - "target": 55, + "target": 54, "type": "produces" }, { - "source": 56, + "source": 55, "target": 7, "type": "consumes" }, { "source": 7, - "target": 56, + "target": 55, "type": "produces" }, { - "source": 57, + "source": 56, "target": 7, "type": "consumes" }, { "source": 7, - "target": 57, + "target": 56, "type": "produces" }, { - "source": 45, - "target": 57, + "source": 44, + "target": 56, "type": "produces" }, { "source": 20, - "target": 57, + "target": 56, "type": "produces" }, { - "source": 58, + "source": 57, "target": 7, "type": "consumes" }, { "source": 7, - "target": 58, + "target": 57, "type": "produces" }, { - "source": 59, + "source": 58, "target": 7, "type": "consumes" }, { "source": 7, - "target": 59, + "target": 58, "type": "produces" }, { "source": 7, - "target": 60, + "target": 59, "type": "produces" }, { "source": 12, - "target": 60, + "target": 59, "type": "produces" }, { - "source": 54, - "target": 60, + "source": 53, + "target": 59, "type": "produces" }, { - "source": 61, + "source": 60, "target": 7, "type": "consumes" }, { - "source": 45, - "target": 61, + "source": 44, + "target": 60, "type": "produces" }, { - "source": 54, - "target": 61, + "source": 53, + "target": 60, "type": "produces" }, { "source": 20, - "target": 61, + "target": 60, "type": "produces" }, { - "source": 62, - "target": 43, + "source": 61, + "target": 42, "type": "consumes" }, { "source": 10, - "target": 62, + "target": 61, "type": "produces" }, { - "source": 63, - "target": 64, + "source": 62, + "target": 63, "type": "consumes" }, { - "source": 63, - "target": 65, + "source": 62, + "target": 64, "type": "consumes" }, { - "source": 43, - "target": 63, + "source": 42, + "target": 62, "type": "produces" }, { - "source": 65, - "target": 63, + "source": 64, + "target": 62, "type": "produces" }, { "source": 20, - "target": 63, + "target": 62, "type": "produces" }, { - "source": 66, + "source": 65, "target": 2, "type": "consumes" }, { "source": 17, - "target": 66, + "target": 65, "type": "produces" }, { "source": 5, - "target": 66, + "target": 65, "type": "produces" }, { - "source": 67, + "source": 66, "target": 7, "type": "consumes" }, { - "source": 45, - "target": 67, + "source": 44, + "target": 66, "type": "produces" }, { - "source": 68, - "target": 45, + "source": 67, + "target": 44, "type": "consumes" }, { - "source": 69, + "source": 68, "target": 2, "type": "consumes" }, { - "source": 69, - "target": 70, + "source": 68, + "target": 69, "type": "consumes" }, { "source": 20, - "target": 69, + "target": 68, "type": "produces" }, { - "source": 71, - "target": 69, + "source": 70, + "target": 68, "type": "produces" }, { - "source": 72, + "source": 71, "target": 10, "type": "consumes" }, { - "source": 70, - "target": 72, + "source": 69, + "target": 71, "type": "produces" }, { - "source": 73, + "source": 72, "target": 3, "type": "consumes" }, { "source": 20, - "target": 73, + "target": 72, "type": "produces" }, { - "source": 74, - "target": 75, + "source": 73, + "target": 74, "type": "consumes" }, { "source": 20, - "target": 74, + "target": 73, "type": "produces" }, { - "source": 76, + "source": 75, "target": 2, "type": "consumes" }, { - "source": 76, + "source": 75, "target": 20, "type": "consumes" }, { "source": 10, - "target": 76, + "target": 75, "type": "produces" }, { - "source": 77, + "source": 76, "target": 16, "type": "consumes" }, { - "source": 78, - "target": 77, + "source": 77, + "target": 76, "type": "produces" }, { - "source": 79, + "source": 78, "target": 7, "type": "consumes" }, { "source": 7, - "target": 79, + "target": 78, "type": "produces" }, { - "source": 80, + "source": 79, "target": 3, "type": "consumes" }, { "source": 5, - "target": 80, + "target": 79, "type": "produces" }, { - "source": 81, + "source": 80, "target": 3, "type": "consumes" }, { - "source": 43, - "target": 81, + "source": 42, + "target": 80, "type": "produces" }, { "source": 4, - "target": 81, + "target": 80, "type": "produces" }, { - "source": 82, - "target": 43, + "source": 81, + "target": 42, "type": "consumes" }, { "source": 10, - "target": 82, + "target": 81, "type": "produces" }, { - "source": 83, - "target": 43, + "source": 82, + "target": 42, "type": "consumes" }, { "source": 10, - "target": 83, + "target": 82, "type": "produces" }, { - "source": 84, + "source": 83, "target": 7, "type": "consumes" }, { - "source": 43, - "target": 84, + "source": 42, + "target": 83, "type": "produces" }, { "source": 20, - "target": 84, + "target": 83, "type": "produces" }, { - "source": 85, - "target": 64, + "source": 84, + "target": 63, "type": "consumes" }, { - "source": 85, - "target": 65, + "source": 84, + "target": 64, "type": "consumes" }, { - "source": 43, - "target": 85, + "source": 42, + "target": 84, "type": "produces" }, { - "source": 86, + "source": 85, "target": 7, "type": "consumes" }, { - "source": 45, - "target": 86, + "source": 44, + "target": 85, "type": "produces" }, { - "source": 65, - "target": 86, + "source": 64, + "target": 85, "type": "produces" }, { - "source": 87, - "target": 43, + "source": 86, + "target": 42, "type": "consumes" }, { "source": 10, - "target": 87, + "target": 86, "type": "produces" }, { - "source": 88, + "source": 87, "target": 2, "type": "consumes" }, { - "source": 88, - "target": 65, + "source": 87, + "target": 64, "type": "consumes" }, { - "source": 88, + "source": 87, "target": 17, "type": "consumes" }, { - "source": 43, - "target": 88, + "source": 42, + "target": 87, "type": "produces" }, { "source": 4, - "target": 88, + "target": 87, "type": "produces" }, { - "source": 65, - "target": 88, + "source": 64, + "target": 87, "type": "produces" }, { "source": 17, - "target": 88, + "target": 87, "type": "produces" }, { - "source": 89, - "target": 43, + "source": 88, + "target": 42, "type": "consumes" }, { - "source": 89, - "target": 64, + "source": 88, + "target": 63, "type": "consumes" }, { "source": 9, - "target": 89, + "target": 88, "type": "produces" }, { - "source": 90, - "target": 65, + "source": 89, + "target": 64, "type": "consumes" }, { - "source": 90, + "source": 89, "target": 3, "type": "consumes" }, { "source": 17, - "target": 90, + "target": 89, "type": "produces" }, { "source": 3, - "target": 90, + "target": 89, "type": "produces" }, { "source": 20, - "target": 90, + "target": 89, "type": "produces" }, { - "source": 91, - "target": 90, + "source": 90, + "target": 89, "type": "produces" }, { - "source": 92, + "source": 91, "target": 3, "type": "consumes" }, { "source": 4, - "target": 92, + "target": 91, "type": "produces" }, { - "source": 93, + "source": 92, "target": 7, "type": "consumes" }, { "source": 7, - "target": 93, + "target": 92, "type": "produces" }, { - "source": 94, + "source": 93, "target": 2, "type": "consumes" }, { "source": 4, - "target": 94, + "target": 93, "type": "produces" }, { - "source": 95, + "source": 94, "target": 16, "type": "consumes" }, { - "source": 95, + "source": 94, "target": 3, "type": "consumes" }, { - "source": 95, + "source": 94, "target": 20, "type": "consumes" }, { "source": 2, - "target": 95, + "target": 94, "type": "produces" }, { "source": 3, - "target": 95, + "target": 94, "type": "produces" }, { - "source": 96, - "target": 71, + "source": 95, + "target": 70, "type": "consumes" }, { "source": 4, - "target": 96, + "target": 95, "type": "produces" }, { - "source": 97, + "source": 96, "target": 7, "type": "consumes" }, { "source": 7, - "target": 97, + "target": 96, "type": "produces" }, { - "source": 45, - "target": 97, + "source": 44, + "target": 96, "type": "produces" }, { "source": 20, - "target": 97, + "target": 96, "type": "produces" }, { - "source": 98, + "source": 97, "target": 3, "type": "consumes" }, { - "source": 75, - "target": 98, + "source": 74, + "target": 97, "type": "produces" }, { - "source": 99, + "source": 98, "target": 12, "type": "consumes" }, { - "source": 100, - "target": 99, + "source": 99, + "target": 98, "type": "produces" }, { - "source": 101, + "source": 100, "target": 12, "type": "consumes" }, { "source": 12, - "target": 101, + "target": 100, "type": "produces" }, { - "source": 102, + "source": 101, "target": 12, "type": "consumes" }, { - "source": 100, - "target": 102, + "source": 99, + "target": 101, "type": "produces" }, { - "source": 103, + "source": 102, "target": 10, "type": "consumes" }, { "source": 10, - "target": 103, + "target": 102, "type": "produces" }, { - "source": 104, + "source": 103, "target": 7, "type": "consumes" }, { "source": 7, - "target": 104, + "target": 103, "type": "produces" }, { - "source": 105, + "source": 104, "target": 3, "type": "consumes" }, { - "source": 105, - "target": 71, + "source": 104, + "target": 70, "type": "consumes" }, { "source": 4, - "target": 105, + "target": 104, "type": "produces" }, { "source": 5, - "target": 105, + "target": 104, "type": "produces" }, { - "source": 106, - "target": 78, + "source": 105, + "target": 77, "type": "consumes" }, { "source": 5, - "target": 106, + "target": 105, "type": "produces" }, { - "source": 107, + "source": 106, "target": 7, "type": "consumes" }, { "source": 7, - "target": 107, + "target": 106, "type": "produces" }, { - "source": 108, + "source": 107, "target": 2, "type": "consumes" }, { "source": 4, - "target": 108, + "target": 107, "type": "produces" }, { - "source": 109, + "source": 108, "target": 7, "type": "consumes" }, { - "source": 109, + "source": 108, "target": 2, "type": "consumes" }, { - "source": 109, + "source": 108, "target": 12, "type": "consumes" }, { - "source": 109, + "source": 108, "target": 16, "type": "consumes" }, { - "source": 109, - "target": 78, + "source": 108, + "target": 77, "type": "consumes" }, { - "source": 110, + "source": 109, "target": 2, "type": "consumes" }, { - "source": 110, + "source": 109, "target": 3, "type": "consumes" }, { "source": 7, - "target": 110, + "target": 109, "type": "produces" }, { "source": 4, - "target": 110, + "target": 109, "type": "produces" }, { - "source": 111, + "source": 110, "target": 3, "type": "consumes" }, { "source": 4, - "target": 111, + "target": 110, "type": "produces" }, { "source": 17, - "target": 111, + "target": 110, "type": "produces" }, { "source": 5, - "target": 111, + "target": 110, "type": "produces" }, { - "source": 112, + "source": 111, "target": 7, "type": "consumes" }, { - "source": 112, + "source": 111, "target": 20, "type": "consumes" }, { "source": 7, - "target": 112, + "target": 111, "type": "produces" }, { - "source": 113, + "source": 112, "target": 7, "type": "consumes" }, { "source": 7, - "target": 113, + "target": 112, "type": "produces" }, { - "source": 114, + "source": 113, "target": 2, "type": "consumes" }, { - "source": 114, - "target": 71, + "source": 113, + "target": 70, "type": "consumes" }, { "source": 4, - "target": 114, + "target": 113, "type": "produces" }, { - "source": 71, - "target": 114, + "source": 70, + "target": 113, "type": "produces" }, { - "source": 115, + "source": 114, "target": 2, "type": "consumes" }, { - "source": 115, - "target": 71, + "source": 114, + "target": 70, "type": "consumes" }, { "source": 4, - "target": 115, + "target": 114, "type": "produces" }, { - "source": 71, - "target": 115, + "source": 70, + "target": 114, "type": "produces" }, { - "source": 116, + "source": 115, "target": 2, "type": "consumes" }, { - "source": 116, - "target": 71, + "source": 115, + "target": 70, "type": "consumes" }, { - "source": 71, - "target": 116, + "source": 70, + "target": 115, "type": "produces" }, { - "source": 117, + "source": 116, "target": 7, "type": "consumes" }, { "source": 7, - "target": 117, + "target": 116, "type": "produces" }, { - "source": 118, + "source": 117, "target": 7, "type": "consumes" }, { - "source": 45, - "target": 118, + "source": 44, + "target": 117, "type": "produces" }, { - "source": 119, + "source": 118, "target": 16, "type": "consumes" }, { - "source": 119, + "source": 118, "target": 3, "type": "consumes" }, { - "source": 119, + "source": 118, "target": 20, "type": "consumes" }, { - "source": 120, + "source": 119, "target": 7, "type": "consumes" }, { - "source": 120, + "source": 119, "target": 12, "type": "consumes" }, { - "source": 120, - "target": 121, + "source": 119, + "target": 120, "type": "consumes" }, { "source": 16, - "target": 120, + "target": 119, "type": "produces" }, { - "source": 122, - "target": 64, + "source": 121, + "target": 63, "type": "consumes" }, { - "source": 122, - "target": 65, + "source": 121, + "target": 64, "type": "consumes" }, { - "source": 43, - "target": 122, + "source": 42, + "target": 121, "type": "produces" }, { - "source": 123, - "target": 43, + "source": 122, + "target": 42, "type": "consumes" }, { "source": 10, - "target": 123, + "target": 122, "type": "produces" }, { - "source": 124, + "source": 123, "target": 7, "type": "consumes" }, { "source": 7, - "target": 124, + "target": 123, "type": "produces" }, { - "source": 125, - "target": 71, + "source": 124, + "target": 70, "type": "consumes" }, { "source": 4, - "target": 125, + "target": 124, "type": "produces" }, { - "source": 126, + "source": 125, "target": 20, "type": "consumes" }, { "source": 4, - "target": 126, + "target": 125, "type": "produces" }, { - "source": 127, + "source": 126, "target": 3, "type": "consumes" }, { "source": 20, - "target": 127, + "target": 126, "type": "produces" }, { - "source": 128, + "source": 127, "target": 7, "type": "consumes" }, { "source": 7, - "target": 128, + "target": 127, "type": "produces" }, { - "source": 129, + "source": 128, "target": 7, "type": "consumes" }, { - "source": 45, - "target": 129, + "source": 44, + "target": 128, "type": "produces" }, { "source": 20, - "target": 129, + "target": 128, "type": "produces" }, { - "source": 130, + "source": 129, "target": 7, "type": "consumes" }, { "source": 7, - "target": 130, + "target": 129, "type": "produces" }, { - "source": 131, + "source": 130, "target": 7, "type": "consumes" }, { - "source": 131, + "source": 130, "target": 12, "type": "consumes" }, { "source": 7, - "target": 131, + "target": 130, "type": "produces" }, { "source": 4, - "target": 131, + "target": 130, "type": "produces" }, { "source": 16, - "target": 131, + "target": 130, "type": "produces" }, { "source": 17, - "target": 131, + "target": 130, "type": "produces" }, { "source": 5, - "target": 131, + "target": 130, "type": "produces" }, { - "source": 132, + "source": 131, "target": 7, "type": "consumes" }, { "source": 7, - "target": 132, + "target": 131, "type": "produces" }, { - "source": 133, + "source": 132, "target": 7, "type": "consumes" }, { - "source": 45, - "target": 133, + "source": 44, + "target": 132, "type": "produces" }, { - "source": 134, + "source": 133, "target": 3, "type": "consumes" }, { "source": 4, - "target": 134, + "target": 133, "type": "produces" }, { - "source": 135, + "source": 134, "target": 20, "type": "consumes" }, { - "source": 65, - "target": 135, + "source": 64, + "target": 134, "type": "produces" }, { - "source": 136, - "target": 137, + "source": 135, + "target": 136, "type": "consumes" }, { - "source": 136, + "source": 135, "target": 7, "type": "consumes" }, { - "source": 136, + "source": 135, "target": 23, "type": "consumes" }, { - "source": 136, + "source": 135, "target": 2, "type": "consumes" }, { - "source": 136, + "source": 135, "target": 12, "type": "consumes" }, { - "source": 136, - "target": 121, + "source": 135, + "target": 120, "type": "consumes" }, { - "source": 136, - "target": 65, + "source": 135, + "target": 64, "type": "consumes" }, { - "source": 136, + "source": 135, "target": 25, "type": "consumes" }, { - "source": 136, + "source": 135, "target": 3, "type": "consumes" }, { - "source": 136, + "source": 135, "target": 20, "type": "consumes" }, { - "source": 136, - "target": 48, + "source": 135, + "target": 47, "type": "consumes" }, { "source": 7, - "target": 136, + "target": 135, "type": "produces" }, { "source": 4, - "target": 136, + "target": 135, "type": "produces" }, { "source": 12, - "target": 136, + "target": 135, "type": "produces" }, { "source": 16, - "target": 136, + "target": 135, "type": "produces" }, { - "source": 64, - "target": 136, + "source": 63, + "target": 135, "type": "produces" }, { - "source": 138, + "source": 137, "target": 16, "type": "consumes" }, { "source": 7, - "target": 138, + "target": 137, "type": "produces" }, { - "source": 45, - "target": 138, + "source": 44, + "target": 137, "type": "produces" }, { - "source": 139, + "source": 138, "target": 7, "type": "consumes" }, { "source": 7, - "target": 139, + "target": 138, "type": "produces" }, { - "source": 140, + "source": 139, "target": 7, "type": "consumes" }, { "source": 7, - "target": 140, + "target": 139, "type": "produces" }, { - "source": 141, + "source": 140, "target": 7, "type": "consumes" }, { - "source": 141, + "source": 140, "target": 23, "type": "consumes" }, { - "source": 142, + "source": 141, "target": 2, "type": "consumes" }, { - "source": 142, + "source": 141, "target": 3, "type": "consumes" }, { "source": 4, - "target": 142, + "target": 141, "type": "produces" }, { "source": 5, - "target": 142, + "target": 141, "type": "produces" }, { - "source": 143, + "source": 142, "target": 7, "type": "consumes" }, { "source": 7, - "target": 143, + "target": 142, "type": "produces" }, { - "source": 144, - "target": 43, + "source": 143, + "target": 42, "type": "consumes" }, { - "source": 144, + "source": 143, "target": 10, "type": "consumes" }, { - "source": 144, + "source": 143, "target": 2, "type": "consumes" }, { - "source": 144, - "target": 70, + "source": 143, + "target": 69, "type": "consumes" }, { "source": 4, - "target": 144, + "target": 143, "type": "produces" }, { "source": 5, - "target": 144, + "target": 143, "type": "produces" }, { - "source": 145, + "source": 144, "target": 10, "type": "consumes" }, { "source": 10, - "target": 145, + "target": 144, "type": "produces" }, { - "source": 146, + "source": 145, "target": 3, "type": "consumes" }, { "source": 4, - "target": 146, + "target": 145, "type": "produces" }, { - "source": 147, + "source": 146, "target": 7, "type": "consumes" }, { "source": 7, - "target": 147, + "target": 146, "type": "produces" }, { "source": 20, - "target": 147, + "target": 146, "type": "produces" }, { - "source": 148, + "source": 147, "target": 3, "type": "consumes" }, { "source": 7, - "target": 148, + "target": 147, "type": "produces" }, { - "source": 149, - "target": 148, + "source": 148, + "target": 147, "type": "produces" }, { - "source": 150, + "source": 149, "target": 7, "type": "consumes" }, { "source": 7, - "target": 150, + "target": 149, "type": "produces" }, { - "source": 151, + "source": 150, "target": 7, "type": "consumes" }, { "source": 7, - "target": 151, + "target": 150, "type": "produces" }, { - "source": 152, + "source": 151, "target": 3, "type": "consumes" }, { "source": 18, - "target": 152, + "target": 151, "type": "produces" }, { - "source": 153, + "source": 152, "target": 2, "type": "consumes" }, { "source": 17, - "target": 153, + "target": 152, "type": "produces" }, { - "source": 154, + "source": 153, "target": 7, "type": "consumes" }, { "source": 7, - "target": 154, + "target": 153, "type": "produces" }, { "source": 20, - "target": 154, + "target": 153, "type": "produces" }, { - "source": 155, - "target": 71, + "source": 154, + "target": 70, "type": "consumes" }, { - "source": 156, + "source": 155, "target": 4, "type": "consumes" }, { - "source": 156, + "source": 155, "target": 17, "type": "consumes" }, { - "source": 156, + "source": 155, "target": 3, "type": "consumes" }, { - "source": 156, - "target": 149, + "source": 155, + "target": 148, "type": "consumes" }, { - "source": 156, + "source": 155, "target": 5, "type": "consumes" }, { - "source": 157, + "source": 156, "target": 2, "type": "consumes" }, { - "source": 157, + "source": 156, "target": 17, "type": "consumes" }, { "source": 4, - "target": 157, + "target": 156, "type": "produces" }, { "source": 17, - "target": 157, + "target": 156, "type": "produces" }, { "source": 20, - "target": 157, + "target": 156, "type": "produces" }, { "source": 5, - "target": 157, - "type": "produces" - }, - { - "source": 158, - "target": 7, - "type": "consumes" - }, - { - "source": 7, - "target": 158, + "target": 156, "type": "produces" } ] \ No newline at end of file diff --git a/docs/modules/list_of_modules.md b/docs/modules/list_of_modules.md index d3d50780f0..49dbcecc2f 100644 --- a/docs/modules/list_of_modules.md +++ b/docs/modules/list_of_modules.md @@ -65,7 +65,6 @@ | bufferoverrun | scan | Yes | Query BufferOverrun's TLS API for subdomains | passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2024-10-23 | | builtwith | scan | Yes | Query Builtwith.com for subdomains | affiliates, passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-08-23 | | c99 | scan | Yes | Query the C99 API for subdomains | passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-07-08 | -| censys | scan | Yes | Query the Censys API | passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-08-04 | | certspotter | scan | No | Query Certspotter's API for subdomains | passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-07-28 | | chaos | scan | Yes | Query ProjectDiscovery's Chaos API for subdomains | passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-08-14 | | code_repository | scan | No | Look for code repository links in webpages | code-enum, passive, safe | URL_UNVERIFIED | CODE_REPOSITORY | @domwhewell-sage | 2024-05-15 | @@ -119,7 +118,6 @@ | viewdns | scan | No | Query viewdns.info's reverse whois for related domains | affiliates, passive, safe | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-07-04 | | virustotal | scan | Yes | Query VirusTotal's API for subdomains | passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-08-25 | | wayback | scan | No | Query archive.org's API for subdomains | passive, safe, subdomain-enum | DNS_NAME | DNS_NAME, URL_UNVERIFIED | @liquidsec | 2022-04-01 | -| zoomeye | scan | Yes | Query ZoomEye's API for subdomains | affiliates, passive, safe, subdomain-enum | DNS_NAME | DNS_NAME | @TheTechromancer | 2022-08-03 | | asset_inventory | output | No | Merge hosts, open ports, technologies, findings, etc. into a single asset inventory CSV | | DNS_NAME, FINDING, HTTP_RESPONSE, IP_ADDRESS, OPEN_TCP_PORT, TECHNOLOGY, URL, VULNERABILITY, WAF | IP_ADDRESS, OPEN_TCP_PORT | @liquidsec | 2022-09-30 | | csv | output | No | Output to CSV | | * | | @TheTechromancer | 2022-04-07 | | discord | output | No | Message a Discord channel when certain events are encountered | | * | | @TheTechromancer | 2023-08-14 | diff --git a/docs/scanning/advanced.md b/docs/scanning/advanced.md index e13dc24af8..ecf7659cdc 100644 --- a/docs/scanning/advanced.md +++ b/docs/scanning/advanced.md @@ -72,7 +72,7 @@ Presets: Modules: -m, --modules MODULE [MODULE ...] - Modules to enable. Choices: affiliates,ajaxpro,anubisdb,apkpure,asn,aspnet_bin_exposure,azure_realm,azure_tenant,baddns,baddns_direct,baddns_zone,badsecrets,bevigil,bucket_amazon,bucket_azure,bucket_digitalocean,bucket_file_enum,bucket_firebase,bucket_google,bufferoverrun,builtwith,bypass403,c99,censys,certspotter,chaos,code_repository,credshed,crt,crt_db,dehashed,digitorus,dnsbimi,dnsbrute,dnsbrute_mutations,dnscaa,dnscommonsrv,dnsdumpster,dnstlsrpt,docker_pull,dockerhub,dotnetnuke,emailformat,extractous,ffuf,ffuf_shortnames,filedownload,fingerprintx,fullhunt,generic_ssrf,git,git_clone,gitdumper,github_codesearch,github_org,github_usersearch,github_workflows,gitlab,google_playstore,gowitness,graphql_introspection,hackertarget,host_header,httpx,hunt,hunterio,iis_shortnames,ip2location,ipneighbor,ipstack,jadx,leakix,lightfuzz,medusa,myssl,newsletters,ntlm,nuclei,oauth,otx,paramminer_cookies,paramminer_getparams,paramminer_headers,passivetotal,pgp,portfilter,portscan,postman,postman_download,rapiddns,reflected_parameters,retirejs,robots,securitytrails,securitytxt,shodan_dns,shodan_idb,sitedossier,skymem,smuggler,social,sslcert,subdomaincenter,subdomainradar,telerik,trickest,trufflehog,url_manipulation,urlscan,vhost,viewdns,virustotal,wafw00f,wappalyzer,wayback,wpscan,zoomeye + Modules to enable. Choices: affiliates,ajaxpro,anubisdb,apkpure,asn,aspnet_bin_exposure,azure_realm,azure_tenant,baddns,baddns_direct,baddns_zone,badsecrets,bevigil,bucket_amazon,bucket_azure,bucket_digitalocean,bucket_file_enum,bucket_firebase,bucket_google,bufferoverrun,builtwith,bypass403,c99,certspotter,chaos,code_repository,credshed,crt,crt_db,dehashed,digitorus,dnsbimi,dnsbrute,dnsbrute_mutations,dnscaa,dnscommonsrv,dnsdumpster,dnstlsrpt,docker_pull,dockerhub,dotnetnuke,emailformat,extractous,ffuf,ffuf_shortnames,filedownload,fingerprintx,fullhunt,generic_ssrf,git,git_clone,gitdumper,github_codesearch,github_org,github_usersearch,github_workflows,gitlab,google_playstore,gowitness,graphql_introspection,hackertarget,host_header,httpx,hunt,hunterio,iis_shortnames,ip2location,ipneighbor,ipstack,jadx,leakix,lightfuzz,medusa,myssl,newsletters,ntlm,nuclei,oauth,otx,paramminer_cookies,paramminer_getparams,paramminer_headers,passivetotal,pgp,portfilter,portscan,postman,postman_download,rapiddns,reflected_parameters,retirejs,robots,securitytrails,securitytxt,shodan_dns,shodan_idb,sitedossier,skymem,smuggler,social,sslcert,subdomaincenter,subdomainradar,telerik,trickest,trufflehog,url_manipulation,urlscan,vhost,viewdns,virustotal,wafw00f,wappalyzer,wayback,wpscan -l, --list-modules List available modules. -lmo, --list-module-options Show all module config options diff --git a/docs/scanning/configuration.md b/docs/scanning/configuration.md index 59f09925a2..8db3953fa4 100644 --- a/docs/scanning/configuration.md +++ b/docs/scanning/configuration.md @@ -496,8 +496,6 @@ In addition to the stated options for each module, the following universal optio | modules.builtwith.api_key | str | Builtwith API key | | | modules.builtwith.redirects | bool | Also look up inbound and outbound redirects | True | | modules.c99.api_key | str | c99.nl API key | | -| modules.censys.api_key | str | Censys.io API Key in the format of 'key:secret' | | -| modules.censys.max_pages | int | Maximum number of pages to fetch (100 results per page) | 5 | | modules.chaos.api_key | str | Chaos API key | | | modules.credshed.credshed_url | str | URL of credshed server | | | modules.credshed.password | str | Credshed password | | @@ -561,9 +559,6 @@ In addition to the stated options for each module, the following universal optio | modules.virustotal.api_key | str | VirusTotal API Key | | | modules.wayback.garbage_threshold | int | Dedupe similar urls if they are in a group of this size or higher (lower values == less garbage data) | 10 | | modules.wayback.urls | bool | emit URLs in addition to DNS_NAMEs | False | -| modules.zoomeye.api_key | str | ZoomEye API key | | -| modules.zoomeye.include_related | bool | Include domains which may be related to the target | False | -| modules.zoomeye.max_pages | int | How many pages of results to fetch | 20 | | modules.asset_inventory.output_file | str | Set a custom output file | | | modules.asset_inventory.recheck | bool | When use_previous=True, don't retain past details like open ports or findings. Instead, allow them to be rediscovered by the new scan | False | | modules.asset_inventory.summary_netmask | int | Subnet mask to use when summarizing IP addresses at end of scan | 16 | diff --git a/docs/scanning/events.md b/docs/scanning/events.md index ac6bef6ffa..b12b15142f 100644 --- a/docs/scanning/events.md +++ b/docs/scanning/events.md @@ -104,41 +104,41 @@ Below is a full list of event types along with which modules produce/consume the ## List of Event Types -| Event Type | # Consuming Modules | # Producing Modules | Consuming Modules | Producing Modules | -|---------------------|-----------------------|-----------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| * | 18 | 0 | affiliates, cloudcheck, csv, discord, dnsresolve, http, json, mysql, neo4j, postgres, python, slack, splunk, sqlite, stdout, teams, txt, websocket | | -| ASN | 0 | 1 | | asn | -| AZURE_TENANT | 1 | 0 | speculate | | -| CODE_REPOSITORY | 7 | 7 | docker_pull, git_clone, gitdumper, github_workflows, google_playstore, postman_download, trufflehog | code_repository, dockerhub, git, github_codesearch, github_org, gitlab, postman | -| DNS_NAME | 61 | 43 | anubisdb, asset_inventory, azure_realm, azure_tenant, baddns, baddns_zone, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, censys, certspotter, chaos, credshed, crt, crt_db, dehashed, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, emailformat, fullhunt, github_codesearch, github_usersearch, hackertarget, hunterio, leakix, myssl, nmap_xml, oauth, otx, passivetotal, pgp, portscan, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, skymem, speculate, subdomaincenter, subdomainradar, subdomains, trickest, urlscan, viewdns, virustotal, wayback, zoomeye | anubisdb, azure_tenant, bevigil, bufferoverrun, builtwith, c99, censys, certspotter, chaos, crt, crt_db, digitorus, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnsresolve, fullhunt, hackertarget, hunterio, leakix, myssl, ntlm, oauth, otx, passivetotal, rapiddns, securitytrails, shodan_dns, shodan_idb, sitedossier, speculate, sslcert, subdomaincenter, subdomainradar, trickest, urlscan, vhost, viewdns, virustotal, wayback, zoomeye | -| DNS_NAME_UNRESOLVED | 3 | 0 | baddns, speculate, subdomains | | -| EMAIL_ADDRESS | 1 | 11 | emails | credshed, dehashed, dnscaa, dnstlsrpt, emailformat, github_usersearch, hunterio, pgp, securitytxt, skymem, sslcert | -| FILESYSTEM | 4 | 9 | extractous, jadx, trufflehog, unarchive | apkpure, docker_pull, filedownload, git_clone, gitdumper, github_workflows, jadx, postman_download, unarchive | -| FINDING | 2 | 31 | asset_inventory, web_report | ajaxpro, baddns, baddns_direct, baddns_zone, badsecrets, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bypass403, git, gitlab, graphql_introspection, host_header, hunt, lightfuzz, newsletters, ntlm, nuclei, paramminer_cookies, paramminer_getparams, reflected_parameters, retirejs, shodan_idb, smuggler, speculate, telerik, trufflehog, url_manipulation, wpscan | -| GEOLOCATION | 0 | 2 | | ip2location, ipstack | -| HASHED_PASSWORD | 0 | 2 | | credshed, dehashed | -| HTTP_RESPONSE | 19 | 1 | ajaxpro, asset_inventory, badsecrets, dotnetnuke, excavate, filedownload, gitlab, host_header, newsletters, nmap_xml, ntlm, paramminer_cookies, paramminer_getparams, paramminer_headers, speculate, telerik, trufflehog, wappalyzer, wpscan | httpx | -| IP_ADDRESS | 9 | 4 | asn, asset_inventory, ip2location, ipneighbor, ipstack, nmap_xml, portscan, shodan_idb, speculate | asset_inventory, dnsresolve, ipneighbor, speculate | -| IP_RANGE | 2 | 0 | portscan, speculate | | -| MOBILE_APP | 1 | 1 | apkpure | google_playstore | -| OPEN_TCP_PORT | 6 | 4 | asset_inventory, fingerprintx, httpx, nmap_xml, portfilter, sslcert | asset_inventory, portscan, shodan_idb, speculate | -| ORG_STUB | 4 | 1 | dockerhub, github_org, google_playstore, postman | speculate | -| PASSWORD | 0 | 2 | | credshed, dehashed | -| PROTOCOL | 2 | 1 | medusa, nmap_xml | fingerprintx | -| RAW_DNS_RECORD | 0 | 3 | | dnsbimi, dnsresolve, dnstlsrpt | -| RAW_TEXT | 2 | 1 | excavate, trufflehog | extractous | -| SOCIAL | 6 | 4 | dockerhub, github_org, gitlab, gowitness, postman, speculate | dockerhub, github_usersearch, gitlab, social | -| STORAGE_BUCKET | 8 | 5 | baddns_direct, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, speculate | bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google | -| TECHNOLOGY | 4 | 8 | asset_inventory, gitlab, web_report, wpscan | badsecrets, dotnetnuke, gitlab, gowitness, nuclei, shodan_idb, wappalyzer, wpscan | -| URL | 24 | 2 | ajaxpro, aspnet_bin_exposure, asset_inventory, baddns_direct, bypass403, ffuf, generic_ssrf, git, gowitness, graphql_introspection, httpx, iis_shortnames, lightfuzz, ntlm, nuclei, portfilter, robots, smuggler, speculate, telerik, url_manipulation, vhost, wafw00f, web_report | gowitness, httpx | -| URL_HINT | 1 | 1 | ffuf_shortnames | iis_shortnames | -| URL_UNVERIFIED | 8 | 18 | code_repository, filedownload, httpx, oauth, portfilter, retirejs, social, speculate | azure_realm, bevigil, bucket_file_enum, dnsbimi, dnscaa, dnstlsrpt, dockerhub, excavate, ffuf, ffuf_shortnames, github_codesearch, gowitness, hunterio, robots, securitytxt, urlscan, wayback, wpscan | -| USERNAME | 1 | 2 | speculate | credshed, dehashed | -| VHOST | 1 | 1 | web_report | vhost | -| VULNERABILITY | 2 | 15 | asset_inventory, web_report | ajaxpro, aspnet_bin_exposure, baddns, baddns_direct, baddns_zone, badsecrets, dotnetnuke, generic_ssrf, lightfuzz, medusa, nuclei, shodan_idb, telerik, trufflehog, wpscan | -| WAF | 1 | 1 | asset_inventory | wafw00f | -| WEBSCREENSHOT | 0 | 1 | | gowitness | -| WEB_PARAMETER | 7 | 4 | hunt, lightfuzz, paramminer_cookies, paramminer_getparams, paramminer_headers, reflected_parameters, web_parameters | excavate, paramminer_cookies, paramminer_getparams, paramminer_headers | +| Event Type | # Consuming Modules | # Producing Modules | Consuming Modules | Producing Modules | +|---------------------|-----------------------|-----------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| * | 18 | 0 | affiliates, cloudcheck, csv, discord, dnsresolve, http, json, mysql, neo4j, postgres, python, slack, splunk, sqlite, stdout, teams, txt, websocket | | +| ASN | 0 | 1 | | asn | +| AZURE_TENANT | 1 | 0 | speculate | | +| CODE_REPOSITORY | 7 | 7 | docker_pull, git_clone, gitdumper, github_workflows, google_playstore, postman_download, trufflehog | code_repository, dockerhub, git, github_codesearch, github_org, gitlab, postman | +| DNS_NAME | 59 | 41 | anubisdb, asset_inventory, azure_realm, azure_tenant, baddns, baddns_zone, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, certspotter, chaos, credshed, crt, crt_db, dehashed, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, emailformat, fullhunt, github_codesearch, github_usersearch, hackertarget, hunterio, leakix, myssl, nmap_xml, oauth, otx, passivetotal, pgp, portscan, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, skymem, speculate, subdomaincenter, subdomainradar, subdomains, trickest, urlscan, viewdns, virustotal, wayback | anubisdb, azure_tenant, bevigil, bufferoverrun, builtwith, c99, certspotter, chaos, crt, crt_db, digitorus, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnsresolve, fullhunt, hackertarget, hunterio, leakix, myssl, ntlm, oauth, otx, passivetotal, rapiddns, securitytrails, shodan_dns, shodan_idb, sitedossier, speculate, sslcert, subdomaincenter, subdomainradar, trickest, urlscan, vhost, viewdns, virustotal, wayback | +| DNS_NAME_UNRESOLVED | 3 | 0 | baddns, speculate, subdomains | | +| EMAIL_ADDRESS | 1 | 11 | emails | credshed, dehashed, dnscaa, dnstlsrpt, emailformat, github_usersearch, hunterio, pgp, securitytxt, skymem, sslcert | +| FILESYSTEM | 4 | 9 | extractous, jadx, trufflehog, unarchive | apkpure, docker_pull, filedownload, git_clone, gitdumper, github_workflows, jadx, postman_download, unarchive | +| FINDING | 2 | 31 | asset_inventory, web_report | ajaxpro, baddns, baddns_direct, baddns_zone, badsecrets, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bypass403, git, gitlab, graphql_introspection, host_header, hunt, lightfuzz, newsletters, ntlm, nuclei, paramminer_cookies, paramminer_getparams, reflected_parameters, retirejs, shodan_idb, smuggler, speculate, telerik, trufflehog, url_manipulation, wpscan | +| GEOLOCATION | 0 | 2 | | ip2location, ipstack | +| HASHED_PASSWORD | 0 | 2 | | credshed, dehashed | +| HTTP_RESPONSE | 19 | 1 | ajaxpro, asset_inventory, badsecrets, dotnetnuke, excavate, filedownload, gitlab, host_header, newsletters, nmap_xml, ntlm, paramminer_cookies, paramminer_getparams, paramminer_headers, speculate, telerik, trufflehog, wappalyzer, wpscan | httpx | +| IP_ADDRESS | 9 | 4 | asn, asset_inventory, ip2location, ipneighbor, ipstack, nmap_xml, portscan, shodan_idb, speculate | asset_inventory, dnsresolve, ipneighbor, speculate | +| IP_RANGE | 2 | 0 | portscan, speculate | | +| MOBILE_APP | 1 | 1 | apkpure | google_playstore | +| OPEN_TCP_PORT | 6 | 4 | asset_inventory, fingerprintx, httpx, nmap_xml, portfilter, sslcert | asset_inventory, portscan, shodan_idb, speculate | +| ORG_STUB | 4 | 1 | dockerhub, github_org, google_playstore, postman | speculate | +| PASSWORD | 0 | 2 | | credshed, dehashed | +| PROTOCOL | 2 | 1 | medusa, nmap_xml | fingerprintx | +| RAW_DNS_RECORD | 0 | 3 | | dnsbimi, dnsresolve, dnstlsrpt | +| RAW_TEXT | 2 | 1 | excavate, trufflehog | extractous | +| SOCIAL | 6 | 4 | dockerhub, github_org, gitlab, gowitness, postman, speculate | dockerhub, github_usersearch, gitlab, social | +| STORAGE_BUCKET | 8 | 5 | baddns_direct, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, speculate | bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google | +| TECHNOLOGY | 4 | 8 | asset_inventory, gitlab, web_report, wpscan | badsecrets, dotnetnuke, gitlab, gowitness, nuclei, shodan_idb, wappalyzer, wpscan | +| URL | 24 | 2 | ajaxpro, aspnet_bin_exposure, asset_inventory, baddns_direct, bypass403, ffuf, generic_ssrf, git, gowitness, graphql_introspection, httpx, iis_shortnames, lightfuzz, ntlm, nuclei, portfilter, robots, smuggler, speculate, telerik, url_manipulation, vhost, wafw00f, web_report | gowitness, httpx | +| URL_HINT | 1 | 1 | ffuf_shortnames | iis_shortnames | +| URL_UNVERIFIED | 8 | 18 | code_repository, filedownload, httpx, oauth, portfilter, retirejs, social, speculate | azure_realm, bevigil, bucket_file_enum, dnsbimi, dnscaa, dnstlsrpt, dockerhub, excavate, ffuf, ffuf_shortnames, github_codesearch, gowitness, hunterio, robots, securitytxt, urlscan, wayback, wpscan | +| USERNAME | 1 | 2 | speculate | credshed, dehashed | +| VHOST | 1 | 1 | web_report | vhost | +| VULNERABILITY | 2 | 15 | asset_inventory, web_report | ajaxpro, aspnet_bin_exposure, baddns, baddns_direct, baddns_zone, badsecrets, dotnetnuke, generic_ssrf, lightfuzz, medusa, nuclei, shodan_idb, telerik, trufflehog, wpscan | +| WAF | 1 | 1 | asset_inventory | wafw00f | +| WEBSCREENSHOT | 0 | 1 | | gowitness | +| WEB_PARAMETER | 7 | 4 | hunt, lightfuzz, paramminer_cookies, paramminer_getparams, paramminer_headers, reflected_parameters, web_parameters | excavate, paramminer_cookies, paramminer_getparams, paramminer_headers | ## Findings Vs. Vulnerabilities diff --git a/docs/scanning/index.md b/docs/scanning/index.md index f6e7d9eccd..5f5b75779d 100644 --- a/docs/scanning/index.md +++ b/docs/scanning/index.md @@ -112,29 +112,29 @@ A single module can have multiple flags. For example, the `securitytrails` modul ### List of Flags -| Flag | # Modules | Description | Modules | -|------------------|-------------|----------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| safe | 98 | Non-intrusive, safe to run | affiliates, aggregate, ajaxpro, anubisdb, apkpure, asn, aspnet_bin_exposure, azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, badsecrets, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, censys, certspotter, chaos, code_repository, credshed, crt, crt_db, dehashed, digitorus, dnsbimi, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, docker_pull, dockerhub, emailformat, extractous, filedownload, fingerprintx, fullhunt, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, gowitness, graphql_introspection, hackertarget, httpx, hunt, hunterio, iis_shortnames, ip2location, ipstack, jadx, leakix, myssl, newsletters, ntlm, oauth, otx, passivetotal, pgp, portfilter, portscan, postman, postman_download, rapiddns, reflected_parameters, retirejs, robots, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, skymem, social, sslcert, subdomaincenter, subdomainradar, trickest, trufflehog, unarchive, urlscan, viewdns, virustotal, wappalyzer, wayback, zoomeye | -| passive | 70 | Never connects to target systems | affiliates, aggregate, anubisdb, apkpure, asn, azure_realm, azure_tenant, bevigil, bucket_file_enum, bufferoverrun, builtwith, c99, censys, certspotter, chaos, code_repository, credshed, crt, crt_db, dehashed, digitorus, dnsbimi, dnscaa, dnsdumpster, dnstlsrpt, docker_pull, dockerhub, emailformat, excavate, extractous, fullhunt, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, google_playstore, hackertarget, hunterio, ip2location, ipneighbor, ipstack, jadx, leakix, myssl, otx, passivetotal, pgp, portfilter, postman, postman_download, rapiddns, securitytrails, shodan_dns, shodan_idb, sitedossier, skymem, social, speculate, subdomaincenter, subdomainradar, trickest, trufflehog, unarchive, urlscan, viewdns, virustotal, wayback, zoomeye | -| subdomain-enum | 52 | Enumerates subdomains | anubisdb, asn, azure_realm, azure_tenant, baddns_direct, baddns_zone, bevigil, bufferoverrun, builtwith, c99, censys, certspotter, chaos, crt, crt_db, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, fullhunt, github_codesearch, github_org, hackertarget, httpx, hunterio, ipneighbor, leakix, myssl, oauth, otx, passivetotal, postman, postman_download, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, sslcert, subdomaincenter, subdomainradar, subdomains, trickest, urlscan, virustotal, wayback, zoomeye | -| active | 51 | Makes active connections to target systems | ajaxpro, aspnet_bin_exposure, baddns, baddns_direct, baddns_zone, badsecrets, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bypass403, dnsbrute, dnsbrute_mutations, dnscommonsrv, dotnetnuke, ffuf, ffuf_shortnames, filedownload, fingerprintx, generic_ssrf, git, gitlab, gowitness, graphql_introspection, host_header, httpx, hunt, iis_shortnames, lightfuzz, medusa, newsletters, ntlm, nuclei, oauth, paramminer_cookies, paramminer_getparams, paramminer_headers, portscan, reflected_parameters, retirejs, robots, securitytxt, smuggler, sslcert, telerik, url_manipulation, vhost, wafw00f, wappalyzer, wpscan | -| aggressive | 21 | Generates a large amount of network traffic | bypass403, dnsbrute, dnsbrute_mutations, dotnetnuke, ffuf, ffuf_shortnames, generic_ssrf, host_header, ipneighbor, lightfuzz, medusa, nuclei, paramminer_cookies, paramminer_getparams, paramminer_headers, smuggler, telerik, url_manipulation, vhost, wafw00f, wpscan | -| web-basic | 18 | Basic, non-intrusive web scan functionality | azure_realm, baddns, badsecrets, bucket_amazon, bucket_azure, bucket_firebase, bucket_google, filedownload, git, graphql_introspection, httpx, iis_shortnames, ntlm, oauth, robots, securitytxt, sslcert, wappalyzer | -| code-enum | 17 | Find public code repositories and search them for secrets etc. | apkpure, code_repository, docker_pull, dockerhub, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, jadx, postman, postman_download, trufflehog | -| cloud-enum | 16 | Enumerates cloud resources | azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, dnsbimi, dnstlsrpt, httpx, oauth, securitytxt | -| web-thorough | 15 | More advanced web scanning functionality | ajaxpro, aspnet_bin_exposure, bucket_digitalocean, bypass403, dotnetnuke, ffuf_shortnames, generic_ssrf, host_header, hunt, lightfuzz, reflected_parameters, retirejs, smuggler, telerik, url_manipulation | -| slow | 11 | May take a long time to complete | bucket_digitalocean, dnsbrute_mutations, docker_pull, fingerprintx, git_clone, gitdumper, paramminer_cookies, paramminer_getparams, paramminer_headers, smuggler, vhost | -| affiliates | 9 | Discovers affiliated hostnames/domains | affiliates, azure_realm, azure_tenant, builtwith, oauth, sslcert, trickest, viewdns, zoomeye | -| email-enum | 9 | Enumerates email addresses | dehashed, dnscaa, dnstlsrpt, emailformat, emails, hunterio, pgp, skymem, sslcert | -| deadly | 5 | Highly aggressive | ffuf, lightfuzz, medusa, nuclei, vhost | -| baddns | 3 | Runs all modules from the DNS auditing tool BadDNS | baddns, baddns_direct, baddns_zone | -| web-paramminer | 3 | Discovers HTTP parameters through brute-force | paramminer_cookies, paramminer_getparams, paramminer_headers | -| iis-shortnames | 2 | Scans for IIS Shortname vulnerability | ffuf_shortnames, iis_shortnames | -| portscan | 2 | Discovers open ports | portscan, shodan_idb | -| social-enum | 2 | Enumerates social media | httpx, social | -| service-enum | 1 | Identifies protocols running on open ports | fingerprintx | -| subdomain-hijack | 1 | Detects hijackable subdomains | baddns | -| web-screenshots | 1 | Takes screenshots of web pages | gowitness | +| Flag | # Modules | Description | Modules | +|------------------|-------------|----------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| safe | 96 | Non-intrusive, safe to run | affiliates, aggregate, ajaxpro, anubisdb, apkpure, asn, aspnet_bin_exposure, azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, badsecrets, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, certspotter, chaos, code_repository, credshed, crt, crt_db, dehashed, digitorus, dnsbimi, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, docker_pull, dockerhub, emailformat, extractous, filedownload, fingerprintx, fullhunt, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, gowitness, graphql_introspection, hackertarget, httpx, hunt, hunterio, iis_shortnames, ip2location, ipstack, jadx, leakix, myssl, newsletters, ntlm, oauth, otx, passivetotal, pgp, portfilter, portscan, postman, postman_download, rapiddns, reflected_parameters, retirejs, robots, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, skymem, social, sslcert, subdomaincenter, subdomainradar, trickest, trufflehog, unarchive, urlscan, viewdns, virustotal, wappalyzer, wayback | +| passive | 68 | Never connects to target systems | affiliates, aggregate, anubisdb, apkpure, asn, azure_realm, azure_tenant, bevigil, bucket_file_enum, bufferoverrun, builtwith, c99, certspotter, chaos, code_repository, credshed, crt, crt_db, dehashed, digitorus, dnsbimi, dnscaa, dnsdumpster, dnstlsrpt, docker_pull, dockerhub, emailformat, excavate, extractous, fullhunt, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, google_playstore, hackertarget, hunterio, ip2location, ipneighbor, ipstack, jadx, leakix, myssl, otx, passivetotal, pgp, portfilter, postman, postman_download, rapiddns, securitytrails, shodan_dns, shodan_idb, sitedossier, skymem, social, speculate, subdomaincenter, subdomainradar, trickest, trufflehog, unarchive, urlscan, viewdns, virustotal, wayback | +| active | 51 | Makes active connections to target systems | ajaxpro, aspnet_bin_exposure, baddns, baddns_direct, baddns_zone, badsecrets, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bypass403, dnsbrute, dnsbrute_mutations, dnscommonsrv, dotnetnuke, ffuf, ffuf_shortnames, filedownload, fingerprintx, generic_ssrf, git, gitlab, gowitness, graphql_introspection, host_header, httpx, hunt, iis_shortnames, lightfuzz, medusa, newsletters, ntlm, nuclei, oauth, paramminer_cookies, paramminer_getparams, paramminer_headers, portscan, reflected_parameters, retirejs, robots, securitytxt, smuggler, sslcert, telerik, url_manipulation, vhost, wafw00f, wappalyzer, wpscan | +| subdomain-enum | 50 | Enumerates subdomains | anubisdb, asn, azure_realm, azure_tenant, baddns_direct, baddns_zone, bevigil, bufferoverrun, builtwith, c99, certspotter, chaos, crt, crt_db, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, fullhunt, github_codesearch, github_org, hackertarget, httpx, hunterio, ipneighbor, leakix, myssl, oauth, otx, passivetotal, postman, postman_download, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, sslcert, subdomaincenter, subdomainradar, subdomains, trickest, urlscan, virustotal, wayback | +| aggressive | 21 | Generates a large amount of network traffic | bypass403, dnsbrute, dnsbrute_mutations, dotnetnuke, ffuf, ffuf_shortnames, generic_ssrf, host_header, ipneighbor, lightfuzz, medusa, nuclei, paramminer_cookies, paramminer_getparams, paramminer_headers, smuggler, telerik, url_manipulation, vhost, wafw00f, wpscan | +| web-basic | 18 | Basic, non-intrusive web scan functionality | azure_realm, baddns, badsecrets, bucket_amazon, bucket_azure, bucket_firebase, bucket_google, filedownload, git, graphql_introspection, httpx, iis_shortnames, ntlm, oauth, robots, securitytxt, sslcert, wappalyzer | +| code-enum | 17 | Find public code repositories and search them for secrets etc. | apkpure, code_repository, docker_pull, dockerhub, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, jadx, postman, postman_download, trufflehog | +| cloud-enum | 16 | Enumerates cloud resources | azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, dnsbimi, dnstlsrpt, httpx, oauth, securitytxt | +| web-thorough | 15 | More advanced web scanning functionality | ajaxpro, aspnet_bin_exposure, bucket_digitalocean, bypass403, dotnetnuke, ffuf_shortnames, generic_ssrf, host_header, hunt, lightfuzz, reflected_parameters, retirejs, smuggler, telerik, url_manipulation | +| slow | 11 | May take a long time to complete | bucket_digitalocean, dnsbrute_mutations, docker_pull, fingerprintx, git_clone, gitdumper, paramminer_cookies, paramminer_getparams, paramminer_headers, smuggler, vhost | +| email-enum | 9 | Enumerates email addresses | dehashed, dnscaa, dnstlsrpt, emailformat, emails, hunterio, pgp, skymem, sslcert | +| affiliates | 8 | Discovers affiliated hostnames/domains | affiliates, azure_realm, azure_tenant, builtwith, oauth, sslcert, trickest, viewdns | +| deadly | 5 | Highly aggressive | ffuf, lightfuzz, medusa, nuclei, vhost | +| baddns | 3 | Runs all modules from the DNS auditing tool BadDNS | baddns, baddns_direct, baddns_zone | +| web-paramminer | 3 | Discovers HTTP parameters through brute-force | paramminer_cookies, paramminer_getparams, paramminer_headers | +| iis-shortnames | 2 | Scans for IIS Shortname vulnerability | ffuf_shortnames, iis_shortnames | +| portscan | 2 | Discovers open ports | portscan, shodan_idb | +| social-enum | 2 | Enumerates social media | httpx, social | +| service-enum | 1 | Identifies protocols running on open ports | fingerprintx | +| subdomain-hijack | 1 | Detects hijackable subdomains | baddns | +| web-screenshots | 1 | Takes screenshots of web pages | gowitness | ## Dependencies diff --git a/docs/scanning/presets_list.md b/docs/scanning/presets_list.md index ff74f0c793..cd72e922af 100644 --- a/docs/scanning/presets_list.md +++ b/docs/scanning/presets_list.md @@ -42,7 +42,7 @@ Enumerate cloud resources such as storage buckets, etc. -Modules: [59]("`anubisdb`, `asn`, `azure_realm`, `azure_tenant`, `baddns_direct`, `baddns_zone`, `baddns`, `bevigil`, `bucket_amazon`, `bucket_azure`, `bucket_digitalocean`, `bucket_file_enum`, `bucket_firebase`, `bucket_google`, `bufferoverrun`, `builtwith`, `c99`, `censys`, `certspotter`, `chaos`, `crt_db`, `crt`, `digitorus`, `dnsbimi`, `dnsbrute_mutations`, `dnsbrute`, `dnscaa`, `dnscommonsrv`, `dnsdumpster`, `dnstlsrpt`, `fullhunt`, `github_codesearch`, `github_org`, `hackertarget`, `httpx`, `hunterio`, `ipneighbor`, `leakix`, `myssl`, `oauth`, `otx`, `passivetotal`, `postman_download`, `postman`, `rapiddns`, `securitytrails`, `securitytxt`, `shodan_dns`, `shodan_idb`, `sitedossier`, `social`, `sslcert`, `subdomaincenter`, `subdomainradar`, `trickest`, `urlscan`, `virustotal`, `wayback`, `zoomeye`") +Modules: [57]("`anubisdb`, `asn`, `azure_realm`, `azure_tenant`, `baddns_direct`, `baddns_zone`, `baddns`, `bevigil`, `bucket_amazon`, `bucket_azure`, `bucket_digitalocean`, `bucket_file_enum`, `bucket_firebase`, `bucket_google`, `bufferoverrun`, `builtwith`, `c99`, `certspotter`, `chaos`, `crt_db`, `crt`, `digitorus`, `dnsbimi`, `dnsbrute_mutations`, `dnsbrute`, `dnscaa`, `dnscommonsrv`, `dnsdumpster`, `dnstlsrpt`, `fullhunt`, `github_codesearch`, `github_org`, `hackertarget`, `httpx`, `hunterio`, `ipneighbor`, `leakix`, `myssl`, `oauth`, `otx`, `passivetotal`, `postman_download`, `postman`, `rapiddns`, `securitytrails`, `securitytxt`, `shodan_dns`, `shodan_idb`, `sitedossier`, `social`, `sslcert`, `subdomaincenter`, `subdomainradar`, `trickest`, `urlscan`, `virustotal`, `wayback`") ## **code-enum** @@ -271,7 +271,7 @@ Everything everywhere all at once -Modules: [91]("`anubisdb`, `apkpure`, `asn`, `azure_realm`, `azure_tenant`, `baddns_direct`, `baddns_zone`, `baddns`, `badsecrets`, `bevigil`, `bucket_amazon`, `bucket_azure`, `bucket_digitalocean`, `bucket_file_enum`, `bucket_firebase`, `bucket_google`, `bufferoverrun`, `builtwith`, `c99`, `censys`, `certspotter`, `chaos`, `code_repository`, `crt_db`, `crt`, `dehashed`, `digitorus`, `dnsbimi`, `dnsbrute_mutations`, `dnsbrute`, `dnscaa`, `dnscommonsrv`, `dnsdumpster`, `dnstlsrpt`, `docker_pull`, `dockerhub`, `emailformat`, `ffuf_shortnames`, `ffuf`, `filedownload`, `fullhunt`, `git_clone`, `git`, `gitdumper`, `github_codesearch`, `github_org`, `github_usersearch`, `github_workflows`, `gitlab`, `google_playstore`, `gowitness`, `graphql_introspection`, `hackertarget`, `httpx`, `hunt`, `hunterio`, `iis_shortnames`, `ipneighbor`, `jadx`, `leakix`, `myssl`, `ntlm`, `oauth`, `otx`, `paramminer_cookies`, `paramminer_getparams`, `paramminer_headers`, `passivetotal`, `pgp`, `postman_download`, `postman`, `rapiddns`, `reflected_parameters`, `robots`, `securitytrails`, `securitytxt`, `shodan_dns`, `shodan_idb`, `sitedossier`, `skymem`, `social`, `sslcert`, `subdomaincenter`, `subdomainradar`, `trickest`, `trufflehog`, `urlscan`, `virustotal`, `wappalyzer`, `wayback`, `zoomeye`") +Modules: [89]("`anubisdb`, `apkpure`, `asn`, `azure_realm`, `azure_tenant`, `baddns_direct`, `baddns_zone`, `baddns`, `badsecrets`, `bevigil`, `bucket_amazon`, `bucket_azure`, `bucket_digitalocean`, `bucket_file_enum`, `bucket_firebase`, `bucket_google`, `bufferoverrun`, `builtwith`, `c99`, `certspotter`, `chaos`, `code_repository`, `crt_db`, `crt`, `dehashed`, `digitorus`, `dnsbimi`, `dnsbrute_mutations`, `dnsbrute`, `dnscaa`, `dnscommonsrv`, `dnsdumpster`, `dnstlsrpt`, `docker_pull`, `dockerhub`, `emailformat`, `ffuf_shortnames`, `ffuf`, `filedownload`, `fullhunt`, `git_clone`, `git`, `gitdumper`, `github_codesearch`, `github_org`, `github_usersearch`, `github_workflows`, `gitlab`, `google_playstore`, `gowitness`, `graphql_introspection`, `hackertarget`, `httpx`, `hunt`, `hunterio`, `iis_shortnames`, `ipneighbor`, `jadx`, `leakix`, `myssl`, `ntlm`, `oauth`, `otx`, `paramminer_cookies`, `paramminer_getparams`, `paramminer_headers`, `passivetotal`, `pgp`, `postman_download`, `postman`, `rapiddns`, `reflected_parameters`, `robots`, `securitytrails`, `securitytxt`, `shodan_dns`, `shodan_idb`, `sitedossier`, `skymem`, `social`, `sslcert`, `subdomaincenter`, `subdomainradar`, `trickest`, `trufflehog`, `urlscan`, `virustotal`, `wappalyzer`, `wayback`") ## **lightfuzz-heavy** @@ -683,7 +683,7 @@ Enumerate subdomains via APIs, brute-force -Modules: [52]("`anubisdb`, `asn`, `azure_realm`, `azure_tenant`, `baddns_direct`, `baddns_zone`, `bevigil`, `bufferoverrun`, `builtwith`, `c99`, `censys`, `certspotter`, `chaos`, `crt_db`, `crt`, `digitorus`, `dnsbimi`, `dnsbrute_mutations`, `dnsbrute`, `dnscaa`, `dnscommonsrv`, `dnsdumpster`, `dnstlsrpt`, `fullhunt`, `github_codesearch`, `github_org`, `hackertarget`, `httpx`, `hunterio`, `ipneighbor`, `leakix`, `myssl`, `oauth`, `otx`, `passivetotal`, `postman_download`, `postman`, `rapiddns`, `securitytrails`, `securitytxt`, `shodan_dns`, `shodan_idb`, `sitedossier`, `social`, `sslcert`, `subdomaincenter`, `subdomainradar`, `trickest`, `urlscan`, `virustotal`, `wayback`, `zoomeye`") +Modules: [50]("`anubisdb`, `asn`, `azure_realm`, `azure_tenant`, `baddns_direct`, `baddns_zone`, `bevigil`, `bufferoverrun`, `builtwith`, `c99`, `certspotter`, `chaos`, `crt_db`, `crt`, `digitorus`, `dnsbimi`, `dnsbrute_mutations`, `dnsbrute`, `dnscaa`, `dnscommonsrv`, `dnsdumpster`, `dnstlsrpt`, `fullhunt`, `github_codesearch`, `github_org`, `hackertarget`, `httpx`, `hunterio`, `ipneighbor`, `leakix`, `myssl`, `oauth`, `otx`, `passivetotal`, `postman_download`, `postman`, `rapiddns`, `securitytrails`, `securitytxt`, `shodan_dns`, `shodan_idb`, `sitedossier`, `social`, `sslcert`, `subdomaincenter`, `subdomainradar`, `trickest`, `urlscan`, `virustotal`, `wayback`") ## **tech-detect** @@ -779,33 +779,33 @@ Modules: [33]("`ajaxpro`, `aspnet_bin_exposure`, `azure_realm`, `baddns`, `badse Here is a the same data, but in a table: -| Preset | Category | Description | # Modules | Modules | -|----------------------|------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| baddns-intense | | Run all baddns modules and submodules. | 4 | baddns, baddns_direct, baddns_zone, httpx | -| cloud-enum | | Enumerate cloud resources such as storage buckets, etc. | 59 | anubisdb, asn, azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, censys, certspotter, chaos, crt, crt_db, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, fullhunt, github_codesearch, github_org, hackertarget, httpx, hunterio, ipneighbor, leakix, myssl, oauth, otx, passivetotal, postman, postman_download, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, social, sslcert, subdomaincenter, subdomainradar, trickest, urlscan, virustotal, wayback, zoomeye | -| code-enum | | Enumerate Git repositories, Docker images, etc. | 19 | apkpure, code_repository, docker_pull, dockerhub, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, httpx, jadx, postman, postman_download, social, trufflehog | -| dirbust-heavy | web | Recursive web directory brute-force (aggressive) | 5 | ffuf, ffuf_shortnames, httpx, iis_shortnames, wayback | -| dirbust-light | web | Basic web directory brute-force (surface-level directories only) | 4 | ffuf, ffuf_shortnames, httpx, iis_shortnames | -| dotnet-audit | web | Comprehensive scan for all IIS/.NET specific modules and module settings | 9 | ajaxpro, aspnet_bin_exposure, badsecrets, dotnetnuke, ffuf, ffuf_shortnames, httpx, iis_shortnames, telerik | -| email-enum | | Enumerate email addresses from APIs, web crawling, etc. | 8 | dehashed, dnscaa, dnstlsrpt, emailformat, hunterio, pgp, skymem, sslcert | -| fast | | Scan only the provided targets as fast as possible - no extra discovery | 0 | | -| iis-shortnames | web | Recursively enumerate IIS shortnames | 3 | ffuf_shortnames, httpx, iis_shortnames | -| kitchen-sink | | Everything everywhere all at once | 91 | anubisdb, apkpure, asn, azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, badsecrets, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, censys, certspotter, chaos, code_repository, crt, crt_db, dehashed, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, docker_pull, dockerhub, emailformat, ffuf, ffuf_shortnames, filedownload, fullhunt, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, gowitness, graphql_introspection, hackertarget, httpx, hunt, hunterio, iis_shortnames, ipneighbor, jadx, leakix, myssl, ntlm, oauth, otx, paramminer_cookies, paramminer_getparams, paramminer_headers, passivetotal, pgp, postman, postman_download, rapiddns, reflected_parameters, robots, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, skymem, social, sslcert, subdomaincenter, subdomainradar, trickest, trufflehog, urlscan, virustotal, wappalyzer, wayback, zoomeye | -| lightfuzz-heavy | web | Discover web parameters and lightly fuzz them for vulnerabilities, with more intense discovery techniques, including POST parameters, which are more invasive. Uses all lightfuzz modules, and adds paramminer modules for parameter discovery. | 10 | badsecrets, httpx, hunt, lightfuzz, paramminer_cookies, paramminer_getparams, paramminer_headers, portfilter, reflected_parameters, robots | -| lightfuzz-light | web | Discover web parameters and lightly fuzz them for vulnerabilities, with only the most common vulnerabilities and minimal extra modules. Safest to run alongside larger scans. | 3 | httpx, lightfuzz, portfilter | -| lightfuzz-medium | web | Discover web parameters and lightly fuzz them for vulnerabilities. Uses all lightfuzz modules, without some of the more intense discovery techniques. Does not send POST requests. This is the default lightfuzz preset; if you're not sure which one to use, this is a good starting point. | 6 | badsecrets, httpx, hunt, lightfuzz, portfilter, reflected_parameters | -| lightfuzz-superheavy | web | Discover web parameters and lightly fuzz them for vulnerabilities, with the most intense discovery techniques, including POST parameters, which are more invasive. Uses all lightfuzz modules, adds paramminer modules for parameter discovery, and tests each unique parameter-value instance individually. | 10 | badsecrets, httpx, hunt, lightfuzz, paramminer_cookies, paramminer_getparams, paramminer_headers, portfilter, reflected_parameters, robots | -| lightfuzz-xss | web | Discover web parameters and lightly fuzz them, limited to just GET-based xss vulnerabilities. This is an example of a custom lightfuzz preset, selectively enabling a single lightfuzz module. | 5 | httpx, lightfuzz, paramminer_getparams, portfilter, reflected_parameters | -| nuclei | nuclei | Run nuclei scans against all discovered targets | 3 | httpx, nuclei, portfilter | -| nuclei-budget | nuclei | Run nuclei scans against all discovered targets, using budget mode to look for low hanging fruit with greatly reduced number of requests | 3 | httpx, nuclei, portfilter | -| nuclei-intense | nuclei | Run nuclei scans against all discovered targets, allowing for spidering, against ALL URLs, and with additional discovery modules. | 6 | httpx, nuclei, portfilter, robots, urlscan, wayback | -| nuclei-technology | nuclei | Run nuclei scans against all discovered targets, running templates which match discovered technologies | 3 | httpx, nuclei, portfilter | -| paramminer | web | Discover new web parameters via brute-force, and analyze them with additional modules | 6 | httpx, hunt, paramminer_cookies, paramminer_getparams, paramminer_headers, reflected_parameters | -| spider | | Recursive web spider | 1 | httpx | -| spider-intense | | Recursive web spider with more aggressive settings | 1 | httpx | -| subdomain-enum | | Enumerate subdomains via APIs, brute-force | 52 | anubisdb, asn, azure_realm, azure_tenant, baddns_direct, baddns_zone, bevigil, bufferoverrun, builtwith, c99, censys, certspotter, chaos, crt, crt_db, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, fullhunt, github_codesearch, github_org, hackertarget, httpx, hunterio, ipneighbor, leakix, myssl, oauth, otx, passivetotal, postman, postman_download, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, social, sslcert, subdomaincenter, subdomainradar, trickest, urlscan, virustotal, wayback, zoomeye | -| tech-detect | | Detect technologies via Wappalyzer, Nuclei, and FingerprintX | 4 | fingerprintx, httpx, nuclei, wappalyzer | -| web-basic | | Quick web scan | 19 | azure_realm, baddns, badsecrets, bucket_amazon, bucket_azure, bucket_firebase, bucket_google, ffuf_shortnames, filedownload, git, graphql_introspection, httpx, iis_shortnames, ntlm, oauth, robots, securitytxt, sslcert, wappalyzer | -| web-screenshots | | Take screenshots of webpages | 3 | gowitness, httpx, social | -| web-thorough | | Aggressive web scan | 33 | ajaxpro, aspnet_bin_exposure, azure_realm, baddns, badsecrets, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bypass403, dotnetnuke, ffuf_shortnames, filedownload, generic_ssrf, git, graphql_introspection, host_header, httpx, hunt, iis_shortnames, lightfuzz, ntlm, oauth, reflected_parameters, retirejs, robots, securitytxt, smuggler, sslcert, telerik, url_manipulation, wappalyzer | +| Preset | Category | Description | # Modules | Modules | +|----------------------|------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| baddns-intense | | Run all baddns modules and submodules. | 4 | baddns, baddns_direct, baddns_zone, httpx | +| cloud-enum | | Enumerate cloud resources such as storage buckets, etc. | 57 | anubisdb, asn, azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, certspotter, chaos, crt, crt_db, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, fullhunt, github_codesearch, github_org, hackertarget, httpx, hunterio, ipneighbor, leakix, myssl, oauth, otx, passivetotal, postman, postman_download, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, social, sslcert, subdomaincenter, subdomainradar, trickest, urlscan, virustotal, wayback | +| code-enum | | Enumerate Git repositories, Docker images, etc. | 19 | apkpure, code_repository, docker_pull, dockerhub, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, httpx, jadx, postman, postman_download, social, trufflehog | +| dirbust-heavy | web | Recursive web directory brute-force (aggressive) | 5 | ffuf, ffuf_shortnames, httpx, iis_shortnames, wayback | +| dirbust-light | web | Basic web directory brute-force (surface-level directories only) | 4 | ffuf, ffuf_shortnames, httpx, iis_shortnames | +| dotnet-audit | web | Comprehensive scan for all IIS/.NET specific modules and module settings | 9 | ajaxpro, aspnet_bin_exposure, badsecrets, dotnetnuke, ffuf, ffuf_shortnames, httpx, iis_shortnames, telerik | +| email-enum | | Enumerate email addresses from APIs, web crawling, etc. | 8 | dehashed, dnscaa, dnstlsrpt, emailformat, hunterio, pgp, skymem, sslcert | +| fast | | Scan only the provided targets as fast as possible - no extra discovery | 0 | | +| iis-shortnames | web | Recursively enumerate IIS shortnames | 3 | ffuf_shortnames, httpx, iis_shortnames | +| kitchen-sink | | Everything everywhere all at once | 89 | anubisdb, apkpure, asn, azure_realm, azure_tenant, baddns, baddns_direct, baddns_zone, badsecrets, bevigil, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_file_enum, bucket_firebase, bucket_google, bufferoverrun, builtwith, c99, certspotter, chaos, code_repository, crt, crt_db, dehashed, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, docker_pull, dockerhub, emailformat, ffuf, ffuf_shortnames, filedownload, fullhunt, git, git_clone, gitdumper, github_codesearch, github_org, github_usersearch, github_workflows, gitlab, google_playstore, gowitness, graphql_introspection, hackertarget, httpx, hunt, hunterio, iis_shortnames, ipneighbor, jadx, leakix, myssl, ntlm, oauth, otx, paramminer_cookies, paramminer_getparams, paramminer_headers, passivetotal, pgp, postman, postman_download, rapiddns, reflected_parameters, robots, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, skymem, social, sslcert, subdomaincenter, subdomainradar, trickest, trufflehog, urlscan, virustotal, wappalyzer, wayback | +| lightfuzz-heavy | web | Discover web parameters and lightly fuzz them for vulnerabilities, with more intense discovery techniques, including POST parameters, which are more invasive. Uses all lightfuzz modules, and adds paramminer modules for parameter discovery. | 10 | badsecrets, httpx, hunt, lightfuzz, paramminer_cookies, paramminer_getparams, paramminer_headers, portfilter, reflected_parameters, robots | +| lightfuzz-light | web | Discover web parameters and lightly fuzz them for vulnerabilities, with only the most common vulnerabilities and minimal extra modules. Safest to run alongside larger scans. | 3 | httpx, lightfuzz, portfilter | +| lightfuzz-medium | web | Discover web parameters and lightly fuzz them for vulnerabilities. Uses all lightfuzz modules, without some of the more intense discovery techniques. Does not send POST requests. This is the default lightfuzz preset; if you're not sure which one to use, this is a good starting point. | 6 | badsecrets, httpx, hunt, lightfuzz, portfilter, reflected_parameters | +| lightfuzz-superheavy | web | Discover web parameters and lightly fuzz them for vulnerabilities, with the most intense discovery techniques, including POST parameters, which are more invasive. Uses all lightfuzz modules, adds paramminer modules for parameter discovery, and tests each unique parameter-value instance individually. | 10 | badsecrets, httpx, hunt, lightfuzz, paramminer_cookies, paramminer_getparams, paramminer_headers, portfilter, reflected_parameters, robots | +| lightfuzz-xss | web | Discover web parameters and lightly fuzz them, limited to just GET-based xss vulnerabilities. This is an example of a custom lightfuzz preset, selectively enabling a single lightfuzz module. | 5 | httpx, lightfuzz, paramminer_getparams, portfilter, reflected_parameters | +| nuclei | nuclei | Run nuclei scans against all discovered targets | 3 | httpx, nuclei, portfilter | +| nuclei-budget | nuclei | Run nuclei scans against all discovered targets, using budget mode to look for low hanging fruit with greatly reduced number of requests | 3 | httpx, nuclei, portfilter | +| nuclei-intense | nuclei | Run nuclei scans against all discovered targets, allowing for spidering, against ALL URLs, and with additional discovery modules. | 6 | httpx, nuclei, portfilter, robots, urlscan, wayback | +| nuclei-technology | nuclei | Run nuclei scans against all discovered targets, running templates which match discovered technologies | 3 | httpx, nuclei, portfilter | +| paramminer | web | Discover new web parameters via brute-force, and analyze them with additional modules | 6 | httpx, hunt, paramminer_cookies, paramminer_getparams, paramminer_headers, reflected_parameters | +| spider | | Recursive web spider | 1 | httpx | +| spider-intense | | Recursive web spider with more aggressive settings | 1 | httpx | +| subdomain-enum | | Enumerate subdomains via APIs, brute-force | 50 | anubisdb, asn, azure_realm, azure_tenant, baddns_direct, baddns_zone, bevigil, bufferoverrun, builtwith, c99, certspotter, chaos, crt, crt_db, digitorus, dnsbimi, dnsbrute, dnsbrute_mutations, dnscaa, dnscommonsrv, dnsdumpster, dnstlsrpt, fullhunt, github_codesearch, github_org, hackertarget, httpx, hunterio, ipneighbor, leakix, myssl, oauth, otx, passivetotal, postman, postman_download, rapiddns, securitytrails, securitytxt, shodan_dns, shodan_idb, sitedossier, social, sslcert, subdomaincenter, subdomainradar, trickest, urlscan, virustotal, wayback | +| tech-detect | | Detect technologies via Wappalyzer, Nuclei, and FingerprintX | 4 | fingerprintx, httpx, nuclei, wappalyzer | +| web-basic | | Quick web scan | 19 | azure_realm, baddns, badsecrets, bucket_amazon, bucket_azure, bucket_firebase, bucket_google, ffuf_shortnames, filedownload, git, graphql_introspection, httpx, iis_shortnames, ntlm, oauth, robots, securitytxt, sslcert, wappalyzer | +| web-screenshots | | Take screenshots of webpages | 3 | gowitness, httpx, social | +| web-thorough | | Aggressive web scan | 33 | ajaxpro, aspnet_bin_exposure, azure_realm, baddns, badsecrets, bucket_amazon, bucket_azure, bucket_digitalocean, bucket_firebase, bucket_google, bypass403, dotnetnuke, ffuf_shortnames, filedownload, generic_ssrf, git, graphql_introspection, host_header, httpx, hunt, iis_shortnames, lightfuzz, ntlm, oauth, reflected_parameters, retirejs, robots, securitytxt, smuggler, sslcert, telerik, url_manipulation, wappalyzer |