WEBDIENSTE/theHarvester
1
0
Fork 0
mirror of https://github.com/laramies/theHarvester.git synced 2026-08-17 19:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,798 Commits 3 Branches 38 Tags
4c35f1c54f2f429e51d6d06a0c3c9ef40357659c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
NotoriousRebel 4c35f1c54f docs: make README diagrams readable 2026-08-17 00:19:56 -04:00
NotoriousRebel d940ba25ba docs: make the wiki operator focused 2026-08-17 00:01:58 -04:00
NotoriousRebel a9a2318adc docs: make wiki diagrams readable 2026-08-16 23:48:02 -04:00
MattandGitHub bc78a98a08 Merge pull request #2567 from NotoriousRebel/codex/release-final-doc-fixes 
docs: correct 5.0.0 release notes
 2026-08-16 22:54:58 -04:00
NotoriousRebel b7537f7d81 docs: correct 5.0.0 release notes 2026-08-16 22:43:15 -04:00
MattandGitHub 69214fa4f8 Merge pull request #2566 from NotoriousRebel/codex/dev-dependency-cleanup 
Remove unused development dependencies
 2026-08-16 21:49:37 -04:00
NotoriousRebel 34f64e3624 Remove unused development dependencies 
Refs NotoriousRebel/theHarvester#327
 2026-08-16 21:43:28 -04:00
MattandGitHub a528d3fba0 Merge pull request #2565 from NotoriousRebel/codex/runtime-dependency-cleanup 
Remove unused runtime dependencies
 2026-08-16 21:43:02 -04:00
NotoriousRebel 876d9aa602 Remove unused runtime dependencies 
Refs NotoriousRebel/theHarvester#326
 2026-08-16 21:35:22 -04:00
MattandGitHub dbc591a0cc Merge pull request #2564 from NotoriousRebel/codex/provider-outcome-truthfulness 
Report provider collection outcomes truthfully
 2026-08-16 21:33:09 -04:00
NotoriousRebel 9b982db7b6 fix: report provider collection outcomes truthfully 2026-08-16 21:31:08 -04:00
MattandGitHub df67225027 Merge pull request #2562 from NotoriousRebel/codex/source-matrix-provider-links 
Link discovery sources to provider documentation
 2026-08-16 21:05:48 -04:00
NotoriousRebel b14e564c89 docs: link discovery sources to providers 2026-08-16 21:02:37 -04:00
MattandGitHub e60f112253 Merge pull request #2560 from NotoriousRebel/codex/stdlib-json-release 
Replace UltraJSON with the standard library
 2026-08-16 20:24:30 -04:00
NotoriousRebel e26ccba7fe refactor: replace ujson with standard json 
Refs NotoriousRebel/theHarvester#325
 2026-08-16 19:53:34 -04:00
MattandGitHub 02096687c5 Merge pull request #2559 from NotoriousRebel/codex/python314-default 
Require Python 3.14
 2026-08-16 19:48:00 -04:00
NotoriousRebel 2c847b84a2 Require Python 3.14 2026-08-16 19:40:13 -04:00
MattandGitHub b9ec3bfa62 Merge pull request #2558 from NotoriousRebel/codex/harvestview-sqlite-export 
feat: export completed runs as SQLite
 2026-08-16 15:38:11 -04:00
NotoriousRebel 60d1b288b6 docs: align contribution and review guidance 2026-08-16 15:23:08 -04:00
NotoriousRebel 098f12b6a4 docs: keep wiki focused on current behavior 2026-08-16 15:12:19 -04:00
NotoriousRebel 51cd7a5b55 docs: set 5.0.0 release target 2026-08-16 15:06:37 -04:00
NotoriousRebel 8cfd6cf7bb docs: refocus README on current usage 2026-08-16 15:02:44 -04:00
NotoriousRebel 1d94fdae7f docs: define upcoming release contract 2026-08-16 14:51:19 -04:00
NotoriousRebel c91456531c feat: export completed runs as SQLite 2026-08-16 14:41:19 -04:00
MattandGitHub f5d8a421f3 Merge pull request #2557 from NotoriousRebel/codex/harvestview-impeccable-polish 
fix: polish HarvestView evidence review
 2026-08-16 14:20:15 -04:00
MattandGitHub 1acb19fd9e Merge pull request #2556 from NotoriousRebel/codex/docs-jsonl-diagrams 
docs: make JSONL the primary workflow
 2026-08-16 14:09:40 -04:00
NotoriousRebel 60ad04ee16 Document JSONL route extraction 2026-08-16 14:07:36 -04:00
NotoriousRebel 5dcc5ecd25 Remove duplicate diagram HTML 2026-08-16 13:55:45 -04:00
NotoriousRebel edeb440f6b Expand README architecture diagrams 2026-08-16 13:38:19 -04:00
NotoriousRebel bc30f6b82d Restore live package version table 2026-08-16 13:22:47 -04:00
NotoriousRebel acce0fab9e test: harden HarvestView responsive contracts 2026-08-16 13:08:56 -04:00
NotoriousRebel ab931d1da5 docs: correct evidence architecture diagram 2026-08-16 12:53:03 -04:00
NotoriousRebel bfc52ad90f fix: polish HarvestView evidence review 2026-08-16 12:22:47 -04:00
NotoriousRebel 03bb10abfc docs: make JSONL the primary workflow 2026-08-16 11:50:38 -04:00
MattandGitHub 0afe38a86a Merge pull request #2555 from NotoriousRebel/codex/release-feature-validation 
Add repeatable release validation and harden HarvestView
 2026-08-16 11:29:39 -04:00
NotoriousRebel 1e5792bb6b Keep release live checks P0-only 2026-08-16 11:14:41 -04:00
NotoriousRebel f69c765b69 Replace release script with manual workflow 2026-08-16 11:10:34 -04:00
NotoriousRebel 9ec774755e Ignore Impeccable critique artifacts 2026-08-16 10:38:03 -04:00
NotoriousRebel b69e22c3b3 Document upstream master publication boundary 2026-08-16 10:29:11 -04:00
NotoriousRebel bf7072758e Remove unused bundled wordlists 2026-08-16 10:24:44 -04:00
NotoriousRebel d6da23a6b6 Polish HarvestView release workflows 2026-08-16 02:27:35 -04:00
NotoriousRebel 799f60c261 Add repeatable pre-release validation gate 2026-08-16 02:23:34 -04:00
MattandGitHub e59a28b5d9 Merge pull request #2553 from NotoriousRebel/codex/sync-master-into-dev 
Sync master changes back into dev
 2026-08-16 02:17:09 -04:00
NotoriousRebel 5e99ef34e6 Merge upstream master into dev 2026-08-16 02:13:14 -04:00
MattandGitHub 219a7c568b Merge pull request #2552 from NotoriousRebel/codex/deepen-source-execution-lifecycle 
Centralize passive-source execution lifecycle
 2026-08-16 00:54:08 -04:00
NotoriousRebel de60af1f17 fix: reject removed adapter lifecycle state 2026-08-16 00:49:16 -04:00
NotoriousRebel 02deafa6f1 fix: reject malformed ZoomEye URL fields 2026-08-16 00:36:14 -04:00
NotoriousRebel 2ac59f3a38 refactor: centralize source execution lifecycle 2026-08-16 00:32:22 -04:00
MattandGitHub f3dc2eb7ab Merge pull request #2550 from NotoriousRebel/codex/provider-contract-release-gate 
Harden provider contracts and enforce offline coverage
 2026-08-16 00:32:00 -04:00
NotoriousRebel 7f946d61f7 fix: align C99 provider failure classification 2026-08-15 23:13:24 -04:00
MattandGitHub 70991a625b Merge pull request #2551 from NotoriousRebel/codex/upstream-gh-cli-host-auth 
Clarify GitHub CLI authentication diagnostics
 2026-08-15 22:36:06 -04:00
NotoriousRebel 8bee09c815 docs: distinguish GitHub connectivity from auth failures 2026-08-15 22:28:22 -04:00
NotoriousRebel 6e0e761661 fix: close provider contract review gaps 2026-08-15 22:28:14 -04:00
NotoriousRebel cab5717126 test: assert complete URLScan pagination output 2026-08-15 21:38:59 -04:00
NotoriousRebel 3e9058a44b docs: clarify GitHub CLI auth diagnostics 2026-08-15 21:34:16 -04:00
NotoriousRebel c1101ca73a test: harden provider contracts and offline coverage 2026-08-15 21:26:35 -04:00
MattandGitHub 4c35f8c28d Merge pull request #2549 from NotoriousRebel/codex/upstream-provider-session-lifecycle 
fix: preserve provider sessions across pagination
 2026-08-15 14:48:28 -04:00
NotoriousRebel df1933b345 fix: preserve provider sessions across pagination 2026-08-15 13:20:26 -04:00
MattandGitHub 6f1e33e896 Merge pull request #2547 from NotoriousRebel/codex/upstream-harvestview-impeccable 
Improve HarvestView run triage and mobile evidence
 2026-08-15 11:58:30 -04:00
NotoriousRebel ef212e135f Merge remote-tracking branch 'upstream/dev' into codex/upstream-harvestview-impeccable 
# Conflicts:
#	CHANGELOG.md
 2026-08-15 11:56:04 -04:00
MattandGitHub 01f5561284 Merge pull request #2545 from NotoriousRebel/codex/upstream-takeover-evidence 
Replace takeover fingerprints with typed DNS-first evidence
 2026-08-15 11:52:11 -04:00
MattandGitHub fad5485de5 Merge pull request #2548 from NotoriousRebel/codex/upstream-source-workers-default 
fix: restore conservative source-worker default
 2026-08-15 11:51:57 -04:00
NotoriousRebel bbc7832c8f fix: reuse bounded takeover transport 2026-08-15 11:44:18 -04:00
NotoriousRebel 2691f0d258 fix: make HarvestView source readiness actionable 2026-08-15 11:43:32 -04:00
NotoriousRebel 4bcf2ceae9 fix: restore conservative source-worker default 2026-08-15 11:41:06 -04:00
NotoriousRebel aad754456a feat: improve HarvestView operator triage 2026-08-15 04:00:01 -04:00
NotoriousRebel ea9dab4b87 feat: replace takeover fingerprints with typed evidence 2026-08-15 03:30:33 -04:00
MattandGitHub f44807a046 refactor: run discovery sources with TaskGroup (#2544) 
* refactor: run discovery sources with TaskGroup

* fix: preserve source runner compatibility diagnostics

* feat: add configurable source workers
 2026-08-15 01:48:33 -04:00
MattandGitHub 4c5e2df9a7 refactor: modernize event-loop bootstrap (#296) (#2538) 2026-08-14 23:16:47 -04:00
MattandGitHub 4fef2c5e3b refactor: bound screenshot lifecycle ownership (#2543) 
* refactor: bound screenshot lifecycle ownership (#293)

* fix: retain HTTP error screenshots (#293)
 2026-08-14 23:10:34 -04:00
MattandGitHub 38e32de023 fix: complete API endpoint scans by default (#2539) 
* fix: complete API endpoint scans by default

* refactor: reuse shared cancellation cleanup
 2026-08-14 23:03:28 -04:00
MattandGitHub 1a9b114a5d fix: complete DNS enumeration by default (#2542) 
* fix: complete DNS enumeration by default

* test: avoid URL substring sanitizer alert
 2026-08-14 22:54:25 -04:00
MattandGitHub bb77613a05 fix: call Censys Platform API directly (#2537) 
* fix: call Censys Platform API directly (#295)

(cherry picked from commit 7ce361413ad35471ab0b6878382f3548b0918dbe)

* docs: clarify Censys global search entitlement
 2026-08-14 22:44:45 -04:00
MattandGitHub 3e864d3984 fix: update BuiltWith to current Domain API (#2536) 
* fix: update BuiltWith to current Domain API (#281)

* refactor: move hostname normalization to shared module
 2026-08-14 22:04:02 -04:00
MattandGitHub b8a8f7c7ca fix: move Shodan discovery into adapter (#2535) 
* fix: move Shodan discovery into adapter (#283)

* docs: clarify Shodan transport and persistence

* fix: query every Shodan-resolved IPv4

* fix: call Shodan Host API directly

* fix: serve HarvestView assets locally

* Revert "fix: serve HarvestView assets locally"

This reverts commit 413e8b25ab.

* docs: clarify Shodan proxy transport

* docs: clarify Shodan changelog entry

* feat: persist structured Shodan host evidence

* feat: expand Shodan discovery with TLS search
 2026-08-14 21:11:12 -04:00
MattandGitHub 259455f1c1 fix: remove Windvane DNS guessing fallback (#2541) 2026-08-14 15:14:53 -04:00
MattandGitHub 7c4420150d Add route-aware no-host result filtering (#2534) 2026-08-13 11:14:55 -04:00
MattandGitHub 624066a3e8 Add RouteViews enrichment and sourced ASN organization attribution (#2528) 
* Add RouteViews network enrichment

* Add authenticated RouteViews API access

* Restrict RouteViews to explicit network pivots

* Restore discovered ASN RouteViews enrichment

* Retain sourced ASN organization attribution

* Avoid dangling and repeated ASN attributions

* Keep automatic RouteViews evidence target-relevant

* Complete target-relevant RouteViews enrichment

* Clarify automatic RouteViews IP pivots
 2026-08-13 10:46:54 -04:00
MattandGitHub 1db27309dd Remove duplicate Chaos discovery source (#2533) 2026-08-12 18:47:34 -04:00
MattandGitHub aed50e0b0d Add crt.name composite hostname discovery (#2531) 2026-08-12 17:05:12 -04:00
MattandGitHub 4643f6f0f9 fix: use explicit provider and browser user agents (#2530) 2026-08-12 17:01:57 -04:00
MattandGitHub 38524ab674 Add Sourcegraph hostname candidates from indexed code (#2524) 
* feat: add bounded Sourcegraph discovery

Use the documented anonymous streaming API with explicit keyword, result, timeout, and line-match bounds; retain only scoped hostname and email evidence with truthful source outcomes.

* Harden Sourcegraph hostname discovery

* Raise Sourcegraph recall budget to 5000

* docs: clarify Sourcegraph candidate semantics

* test: account for combined source catalog
 2026-08-12 12:14:02 -04:00
MattandGitHub 91ed6c1d9f Add APIs.guru hostname, email, and URL discovery (#2525) 
* feat: add bounded APIs.guru discovery

* docs: clarify APIs.guru result boundaries
 2026-08-12 12:06:04 -04:00
MattandGitHub f13280ddad Add typed ASN-prefix routing evidence (#2527) 
* Add typed network evidence foundation

* Deepen network evidence accumulation

* Bound network evidence accumulator limits

* Make nested JSON rejection test version tolerant

* Keep network evidence in unreleased schema v8

* Clarify structured result persistence dispatch
 2026-08-12 10:49:16 -04:00
MattandGitHub ac3c543768 Add bounded provider response streaming (#2526) 
* Add bounded provider response streaming

* Add bounded provider JSON fetching
 2026-08-12 09:41:13 -04:00
MattandGitHub dd93a0e63d fix: persist missing credential outcomes (#2523) 2026-08-12 09:40:37 -04:00
MattandGitHub 801460f835 Fix passive provider failure attribution and parsing (#2518) 
* fix: harden passive provider reliability

* fix: restore HackerTarget reverse DNS coverage
 2026-08-11 17:04:11 -04:00
MattandGitHub fa8afa5e46 Add bounded virtual-host discovery (#2517) 
* Add bounded virtual-host discovery

* Document virtual host probe boundary
 2026-08-11 00:43:04 -04:00
MattandGitHub d766c7c59a Package HarvestView for local deployment (#2513) 
* feat: package HarvestView for local deployment

* Align container smoke with JSONL API

* Align container smoke with unversioned JSONL

* refactor: rename web launcher to harvestview
 2026-08-10 00:19:00 -04:00
MattandGitHub 0d2ab5a0b3 Add the HarvestView web application (#2512) 
* feat: add HarvestView operator UI

* Use JSONL-only HarvestView file flows

* Drive HarvestView activities from the API catalog

* Add result action controls

* Render shared DNS resolver defaults

* Clarify resolver cardinality in HarvestView

* Load Tabulator from CDNjs

* Fix HarvestView wiki link

* Align HarvestView with execution status contract

* Add HarvestView import and action controls

* Harden HarvestView browser assertions

* Simplify HarvestView run selection

* Show truthful HarvestView execution outcomes

* refactor: show canonical URL results in HarvestView

* Show canonical hostname results in HarvestView

* test(harvestview): remove browser error race
 2026-08-10 00:08:05 -04:00
MattandGitHub 1fd5749e52 Add an authenticated durable run API v1 (#2511) 
* Model active evidence in result persistence

* Expose active action diagnostics

* Persist truthful DNS action evidence

* Persist direct action evidence

* feat: add authenticated durable run API v1

* Make API file interchange JSONL-only

* Harden API evidence boundaries

* Remove API rate limiter

* Unify API runs with result persistence

* Support target action runs

* Keep DNS resolver selection action-neutral

* Add action-neutral CLI resolver selection

* Preserve API evidence across JSONL round trips

* Complete HarvestView API run parity

* Harden HarvestView run API contracts

* Remove obsolete bundled network snapshots

Delete the unused bundled AWS IP-range and resolver snapshots while preserving operator-supplied resolver file input.

* refactor: canonicalize URL results

* docs: define a bounded test budget

* Standardize hostname and IP result names

* fix(api): avoid duplicate evidence conflicts
 2026-08-10 00:08:04 -04:00
MattandGitHub e4d37b05a8 Persist per-source run provenance (#2516) 
* Persist per-source run provenance

* Keep the first JSONL contract unversioned

* Explain source yield counts
 2026-08-09 11:50:08 -04:00
MattandGitHub c4af833da0 Use SQLAlchemy for async result persistence (#2515) 
* Use SQLAlchemy for async result persistence

* Explain persistence ORM records

* Clarify persisted run schema

* Clarify legacy schema migration

* Consolidate result persistence

* Preserve incomplete legacy observations
 2026-08-09 00:50:39 -04:00
MattandGitHub 6b02dbddc9 Share safe enumeration execution across transports (#2507) 
* feat: share safe enumeration execution across transports

* fix: clarify safe scan contracts

* fix: preserve public screenshot redirects

* fix: restore operator-controlled active requests

* fix: allow operator-selected API scan targets
 2026-08-07 16:02:16 -04:00
MattandGitHub 7a854eda95 Contract DeHashed and LeakIX evidence (#2506) 
* Contract DeHashed evidence handling

* Align LeakIX with its documented API

* Update provider capability selection

* Require REST auth for DeHashed results
 2026-08-07 00:25:54 -04:00
MattandGitHub 30ac342d9d Remove unavailable Venacus source (#2505) 2026-08-07 00:04:47 -04:00
MattandGitHub ce791dcaca Contract Leak-Lookup evidence handling (#2504) 
* Contract Leak-Lookup evidence

* Preserve additional API compatibility
 2026-08-07 00:01:26 -04:00
MattandGitHub d52e8b1293 Contract Hunter and Tomba provider responses (#2503) 
* Contract Hunter and Tomba pagination

* Honor Hunter and Tomba result windows

* Handle Hunter and Tomba response failures

* Preserve Tomba results across later failures

* Preserve Hunter results across later failures
 2026-08-06 23:36:33 -04:00
MattandGitHub eb7583227a Expose authenticated recursive DNS through REST (#2502) 
* Expose recursive DNS through REST

* Align REST recursive DNS limits and evidence

* Document hard recursive DNS query limits

* Reject non-finite recursive DNS REST runtimes

* Require operator authentication for REST recursion
 2026-08-06 22:53:02 -04:00
MattandGitHub d42322031c Expose bounded recursive DNS discovery in the CLI (#2501) 
* Integrate recursive DNS with CLI persistence

* Expose bounded PTR evidence in recursive DNS output

* Document the CLI hard query default

* Clarify recursive DNS query accounting

* Preserve dual-stack recursive DNS output

* Preserve recursive DNS CLI lifecycle contracts

* Deduplicate exact XML host address pairs
 2026-08-06 22:40:30 -04:00