Files
rengine/tools/data/vhosts.txt
T
Yogesh Ojha 81fa9e899b feat(scans): expansion phase — host discovery, vhost, screenshots, waf
Rounds out expansion (host discovery, virtual hosts, screenshots, WAF):

- host_discovery: naabu liveness sweep marks IpAddress.is_alive for
  ip_range/asn; port_scan then deep-scans only live hosts
- vhost: ffuf Host-header bruteforce (domain, opt-in) -> vhost-only
  Subdomains that http_probe then picks up
- screenshot: httpx headless chromium -> HttpAsset.screenshot_path under
  a scan_media volume
- waf_detect: wafw00f fingerprints WAFs -> HttpAsset.waf

All config-driven (ExpansionConfig) with proxy / user-agent / headers +
per-tool custom args threaded through. Adds ffuf, chromium and wafw00f to
the worker image and a scan_media volume.
2026-06-26 16:17:52 +05:30

104 lines
609 B
Plaintext

www
mail
remote
blog
webmail
server
ns1
ns2
smtp
secure
vpn
m
shop
ftp
mail2
test
portal
ns
ww1
host
support
dev
web
bbs
ww42
mx
email
cloud
1
mail1
2
forum
owa
www2
gw
admin
store
mx1
cdn
api
exchange
app
gov
2tty
vps
govyty
news
1rer
lib
cms
git
staging
beta
dashboard
internal
intranet
proxy
db
database
mysql
sql
backup
cpanel
whm
autodiscover
autoconfig
mobile
demo
docs
status
assets
static
images
img
media
files
download
downloads
upload
ftp2
old
new
cache
auth
login
sso
jira
confluence
gitlab
jenkins
ci
nexus
docker
registry
kibana
grafana
prometheus
elastic
search
analytics
stats
monitor
metrics