URL rules run inside the inventory writer: static files, crawler artifacts,
platform noise, and URLs past the per-family, per-language and per-folder
caps are not stored. Tracking and cache-busting parameters, session path
segments and index files are cleaned off every URL. Response rules run after
the probe and delete rows the answer proves are not endpoints: not found
against a three-request canary per root, archive rot, off-scope and fan-in
redirects, the root's body at another path, identical and similar bodies.
Every drop is counted per rule on the source's coverage row and shown in the
Endpoints coverage popover.
A family column sits beside the untouched signature (host, identifier- and
language-folded shape, parameter names) and the probe partitions by it. Five
knobs on the URL Discovery stage; thresholds stay as constants. Proxy,
imported and fuzz rows are protected. katana runs with query parameters
ignored and static extensions filtered.
Measured on hamropatro.com: 21,430 URLs found, 694 stored, 20,448 dropped.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FkwdfHUdcUc4ToUoe55HMZ
Proxy observations are written as endpoint rows with source proxy into the
target's covering scan; a target without a census scan gets a Browsing run,
and finalize replays recorded shapes into a new census scan. "Seen by a
scan" is host plus path shape (new endpoints.shape column, backfilled),
with parameter differences reported as their own notice and unseen claimed
only when a settled scan covers the target.
Removed the scan trigger, sessions and coverage surfaces. The jar is served
from binaries/, the setup dialog derives the endpoint from the browser
origin, scans dispatch one run per target with the chosen scan context, and
manual findings mask credential headers. Endpoints page gains Browsed and
Not browsed filters; the Burp tab gains a host line, a notices table with
Open in reNgine, and a report dialog with notes and a result.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PMmqqNaMMjCJWzGG49Xc1i
