mirror of
https://github.com/yogeshojha/rengine.git
synced 2026-10-20 07:11:28 +02:00
After the probe, every stored certificate, header, redirect and page is read for names under the target that discovery did not return. They are resolved, stored with where they were read (tls_cert, response_header, redirect, page_link) and probed in the same stage, so every later stage sees them. Two rounds, 5,000 names a round, only when discovery runs and the run is not seed-only. URL and JSON escapes are decoded before reading, and a name followed by another label is a lookalike, not a match.