L1ghtn1ng
86c2c5f979
fix: enforce discovery security boundaries
...
Keep proxy identities stable across provider conversations, preserve exact target scope, canonicalize evidence, secure first-run config creation, and retain legacy source-name compatibility.
2026-08-25 01:29:05 +01:00
Matt and GitHub
f44807a046
refactor: run discovery sources with TaskGroup ( #2544 )
...
* refactor: run discovery sources with TaskGroup
* fix: preserve source runner compatibility diagnostics
* feat: add configurable source workers
2026-08-15 01:48:33 -04:00
Matt and GitHub
1db27309dd
Remove duplicate Chaos discovery source ( #2533 )
2026-08-12 18:47:34 -04:00
Matt and GitHub
aed50e0b0d
Add crt.name composite hostname discovery ( #2531 )
2026-08-12 17:05:12 -04:00
Matt and GitHub
38524ab674
Add Sourcegraph hostname candidates from indexed code ( #2524 )
...
* feat: add bounded Sourcegraph discovery
Use the documented anonymous streaming API with explicit keyword, result, timeout, and line-match bounds; retain only scoped hostname and email evidence with truthful source outcomes.
* Harden Sourcegraph hostname discovery
* Raise Sourcegraph recall budget to 5000
* docs: clarify Sourcegraph candidate semantics
* test: account for combined source catalog
2026-08-12 12:14:02 -04:00
Matt and GitHub
91ed6c1d9f
Add APIs.guru hostname, email, and URL discovery ( #2525 )
...
* feat: add bounded APIs.guru discovery
* docs: clarify APIs.guru result boundaries
2026-08-12 12:06:04 -04:00
Matt and GitHub
1fd5749e52
Add an authenticated durable run API v1 ( #2511 )
...
* Model active evidence in result persistence
* Expose active action diagnostics
* Persist truthful DNS action evidence
* Persist direct action evidence
* feat: add authenticated durable run API v1
* Make API file interchange JSONL-only
* Harden API evidence boundaries
* Remove API rate limiter
* Unify API runs with result persistence
* Support target action runs
* Keep DNS resolver selection action-neutral
* Add action-neutral CLI resolver selection
* Preserve API evidence across JSONL round trips
* Complete HarvestView API run parity
* Harden HarvestView run API contracts
* Remove obsolete bundled network snapshots
Delete the unused bundled AWS IP-range and resolver snapshots while preserving operator-supplied resolver file input.
* refactor: canonicalize URL results
* docs: define a bounded test budget
* Standardize hostname and IP result names
* fix(api): avoid duplicate evidence conflicts
2026-08-10 00:08:04 -04:00
Matt and GitHub
7a854eda95
Contract DeHashed and LeakIX evidence ( #2506 )
...
* Contract DeHashed evidence handling
* Align LeakIX with its documented API
* Update provider capability selection
* Require REST auth for DeHashed results
2026-08-07 00:25:54 -04:00
Matt and GitHub
30ac342d9d
Remove unavailable Venacus source ( #2505 )
2026-08-07 00:04:47 -04:00
Matt and GitHub
ce791dcaca
Contract Leak-Lookup evidence handling ( #2504 )
...
* Contract Leak-Lookup evidence
* Preserve additional API compatibility
2026-08-07 00:01:26 -04:00
Matt and GitHub
4f76b93513
Preserve direct DNS source result contracts ( #2494 )
...
* Harden explicit DNS direct source contracts
* Reject mismatched Shodan InternetDB evidence
* Preserve valid direct-source IP evidence
* Avoid ambiguous hostname output assertions
* Reference current Pentest-Tools scan documentation
2026-08-06 20:16:23 -04:00
Matt and GitHub
d60afe12e1
Retain GitLab evidence URLs ( #2492 )
2026-08-06 15:39:26 -04:00
Matt and GitHub
a7f883e45c
feat: add HIBP verified-domain source ( #2488 )
2026-08-06 14:47:33 -04:00
NotoriousRebel
35b368b705
fix: retain HIBP breach names in completed results
2026-08-05 23:02:36 -04:00
NotoriousRebel
e063c42a08
fix: remove invalid Bitbucket domain source ( #100 )
2026-08-05 21:45:08 -04:00
NotoriousRebel
7af23e4382
fix: remove nonfunctional ThreatCrowd source ( #98 )
2026-08-05 20:48:35 -04:00
NotoriousRebel
fda00aeda3
fix: separate RapidDNS host and IP evidence
2026-08-04 19:34:32 -04:00
NotoriousRebel
c56c20a57d
refactor: model subdomain result routes explicitly
2026-08-01 13:33:54 -04:00
NotoriousRebel
3bc9cfb296
refactor: derive source capabilities from result routes
2026-07-30 19:47:52 -04:00
L1ghtn1ng