mirror of
https://github.com/j3ssie/osmedeus.git
synced 2026-08-23 16:12:29 +02:00
j3ssie
f5840272c5
Major features: - Add run registry for tracking active runs with PID management - Add API-based run cancellation with process termination - Add event trigger input vars syntax for multi-variable extraction - Add filter_functions with utility function support in triggers - Add event envelope injection for full event context in workflows - Add write coordinator for batched database operations API improvements: - Add logout endpoint and diffs endpoints for assets/vulnerabilities - Add step-results listing endpoint - Update schedule model with target, workspace, params fields - Change run_id to run_uuid across API responses Performance: - Add compiled JS program caching for 60-80% faster loop conditions - Add parallel shard rendering for 20-40% faster workflow startup - Add memory-mapped I/O for large file line counting - Add efficient output buffer combining in runners - Add mtime-based cache invalidation for workflow loader Other changes: - Rename trigger field from trigger to triggers in workflow YAML - Disable pongo2 HTML autoescape for shell command templates - Update JWT expiration default to 1440 minutes (1 day) - Change CORS default to reflect-origin for credentials support - Add source_type field to events (run, eval, api) - Skip copying core Unix tools to external-binaries
33 lines
1.2 KiB
YAML
33 lines
1.2 KiB
YAML
name: http-probing
|
|
kind: module
|
|
description: Running HTTP fingerprint technology and response with the supplied inputs
|
|
|
|
params:
|
|
- name: inputFile
|
|
default: "{{Target}}"
|
|
- name: httpFile
|
|
default: "{{Output}}/fingerprint/http-{{TargetSpace}}.txt"
|
|
- name: httpThreads
|
|
default: "{{ threads * 10 }}"
|
|
- name: httpTimeout
|
|
default: "10"
|
|
- name: defaultUA
|
|
default: "User-Agent: Mozilla/5.0 (compatible; Osmedeus/v4; +https://github.com/j3ssie/osmedeus)"
|
|
|
|
steps:
|
|
- name: httpx-probe
|
|
type: bash
|
|
commands:
|
|
- "echo {{inputFile}} | {{Binaries}}/httpx -nf -timeout {{httpTimeout}} -silent -t {{httpThreads}} >> {{httpFile}}"
|
|
|
|
- name: httpx-fingerprint
|
|
type: bash
|
|
pre_condition: "file_exists('{{httpFile}}')"
|
|
command: >
|
|
cat {{httpFile}} | {{Binaries}}/httpx -H '{{defaultUA}}' -timeout {{httpTimeout}}
|
|
-t {{httpThreads}} -no-fallback -no-color -silent -json -title -favicon
|
|
-hash sha256 -jarm -tech-detect -status-code -cdn -tls-grab -ztls -vhost
|
|
-follow-host-redirects -include-chain -store-response
|
|
-store-response-dir {{Output}}/fingerprint/raw-data
|
|
>> {{Output}}/fingerprint/{{TargetSpace}}-http-overview.txt
|