Yogesh Ojha 5b490e65f2 feat(http_probe): follow the names responses mention ...

After the probe, every stored certificate, header, redirect and page is
read for names under the target that discovery did not return. They are
resolved, stored with where they were read (tls_cert, response_header,
redirect, page_link) and probed in the same stage, so every later stage
sees them. Two rounds, 5,000 names a round, only when discovery runs and
the run is not seed-only. URL and JSON escapes are decoded before reading,
and a name followed by another label is a lookalike, not a match.

2026-09-24 22:37:08 +05:30

..

ai

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

api_key

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

asset_export

feat(tables): select rows and act on them from one action bar

2026-09-15 07:38:48 +05:30

asset_query

feat(whats-new): a timeline of what changed since the last visit

2026-09-24 20:49:34 +05:30

bounty_providers

feat(bounty-hub): HackerOne reports and earnings with program cross-links

2026-09-24 17:51:30 +05:30

correlation

feat(correlation): correlate across every target, not just inside one scan

2026-09-13 09:32:22 +05:30

domain_posture

fix(posture): mail rows judged on sender checks only, ranked MX sweep

2026-09-15 12:38:47 +05:30

orchestrator

feat(worker): split scan stages, scan control and background jobs into three workers

2026-09-24 21:00:44 +05:30

scan_surface

feat(oast): an instance-owned callback server, and a tier that pays the wait once

2026-09-21 20:53:01 +05:30

secret_mining

feat(secrets): mine every stored response a scan holds

2026-09-20 09:01:51 +05:30

surface_query

fix(ips): the address sort casts the way the filters do

2026-09-16 12:50:27 +05:30

__init__.py

Refactor validation and DNS tools, implementation of onboarding wizard

2026-06-21 21:56:20 +05:30

activity_log.py

fix(scans): one NUL byte in a response no longer costs a 66-minute stage

2026-09-06 03:59:33 +05:30

bgp_summary.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

bounty_feed.py

feat(whats-new): a timeline of what changed since the last visit

2026-09-24 20:49:34 +05:30

bounty_programs.py

feat(whats-new): a timeline of what changed since the last visit

2026-09-24 20:49:34 +05:30

bounty_reports.py

feat(bounty-hub): HackerOne reports and earnings with program cross-links

2026-09-24 17:51:30 +05:30

celery_dispatch.py

feat(worker): split scan stages, scan control and background jobs into three workers

2026-09-24 21:00:44 +05:30

cert_freshness.py

copy: state the fact, delete the explanation

2026-09-12 11:35:07 +05:30

debounce.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

endpoint_inventory.py

feat(secrets): mine every stored response a scan holds

2026-09-20 09:01:51 +05:30

endpoint_judge.py

fix(net): a malformed URL port is rejected, not raised, everywhere .port is read

2026-09-16 08:04:06 +05:30

endpoint_noise.py

fix(endpoints): a URL whose port does not read is rejected, not raised

2026-09-16 05:54:41 +05:30

event_publisher.py

Refactor validation and DNS tools, implementation of onboarding wizard

2026-06-21 21:56:20 +05:30

exploitation.py

feat(vulnerabilities): rebuild the finding sheet around triage and the web asset

2026-09-24 09:38:08 +05:30

focused.py

feat(bounty-hub): watch a program

2026-09-12 21:51:18 +05:30

interest.py

refactor(interest): the shipped rule is built in one place

2026-09-16 12:44:36 +05:30

ip_asn.py

fix(ip-asn): fill the network on scans that ran before the ranges landed

2026-09-13 19:09:33 +05:30

ip_inventory.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

launch_plan.py

refactor(engines): remove the two engine settings no stage read

2026-09-13 11:43:20 +05:30

locks.py

feat(bounty-hub): HackerOne reports and earnings with program cross-links

2026-09-24 17:51:30 +05:30

name_ownership.py

feat(stages): name ownership, owned names another organisation's server answers

2026-09-24 22:27:25 +05:30

new_checks.py

feat(nuclei): monitor targets against new checks, and a review pass on the pipeline

2026-09-20 09:02:17 +05:30

notification_sync.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

notification.py

feat(bounty-hub): watch a program

2026-09-12 21:51:18 +05:30

notifier.py

fix(remote-control): a dev pivot link broke every reply, an unbounded lock leaked

2026-09-16 08:08:10 +05:30

nvd_corpus.py

feat(cve): CVEs become a surface of their own

2026-09-12 18:28:41 +05:30

oast.py

feat(oast): an instance-owned callback server, and a tier that pays the wait once

2026-09-21 20:53:01 +05:30

organization.py

fix(api): two names that reduce to the same slug returned 500

2026-09-07 07:04:45 +05:30

origin_exposure.py

fix(origin-probe): narrow what a shared fingerprint may claim

2026-09-22 19:36:48 +05:30

planner_stats.py

perf: make the read path scale with the estate

2026-09-12 08:49:41 +05:30

port_inventory.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

proxy_resolve.py

fix(scan): close the last gaps between a scan context and its tools

2026-09-13 12:31:26 +05:30

proxy_sync.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

recheck.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

report_fonts.py

feat(reports): templates as a filtered table with default and custom badges

2026-09-24 19:07:57 +05:30

response_names.py

feat(http_probe): follow the names responses mention

2026-09-24 22:37:08 +05:30

retention.py

feat(secrets): mine every stored response a scan holds

2026-09-20 09:01:51 +05:30

scan_factory.py

feat(targets): store the assets you already know and seed every scan with them

2026-09-13 07:21:10 +05:30

scan_resolve.py

fix(stages): a stage with passive and active sources says so

2026-09-14 12:43:52 +05:30

scan_scope.py

fix(coverage): findings come from the run that scanned for them

2026-09-24 18:53:54 +05:30

schedule_timing.py

feat: implement scan scheduling functionality

2026-06-24 08:10:21 +05:30

scope_filter.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

screenshot_store.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

software_match.py

perf(software): the backfill converges and match_scan merges instead of rebuilding

2026-09-15 17:22:35 +05:30

surface_scope_sync.py

feat(exports): run an export as a job, and keep the recipe

2026-09-13 08:21:50 +05:30

tag.py

fix(api): two names that reduce to the same slug returned 500

2026-09-07 07:04:45 +05:30

target_seeds.py

feat(targets): store the assets you already know and seed every scan with them

2026-09-13 07:21:10 +05:30

threat_intel.py

feat(cve): CVEs become a surface of their own

2026-09-12 18:28:41 +05:30

vuln_inventory.py

feat(nuclei): monitor targets against new checks, and a review pass on the pipeline

2026-09-20 09:02:17 +05:30

vuln_templates.py

feat(oast): an instance-owned callback server, and a tier that pays the wait once

2026-09-21 20:53:01 +05:30

vulnx.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

watch_sync.py

fix(scan): claim and dispatch a canvas under one row lock

2026-09-13 11:36:38 +05:30

web_hygiene.py

feat(hygiene): derive web hygiene checks from stored responses

2026-09-12 10:11:41 +05:30

wordlists.py

feat(arsenal): one layout and one vocabulary across nuclei, wordlists and exploit intel

2026-09-24 18:53:17 +05:30