[feature request]. Project Templates

[tracure1337]

[feature request]. Project Templates

Wonderful project. I am really digging it.

It would be really neat if one could create full project templates with workspaces , issues and sub tasks.

My projects are always the same (expanding and iterating on the issues though).

But when creating a new project I'd like to have the different workspaces , issues and sub-tasks already all filled out/ created with one click.

Thank you for your consideration.

[AggManik]

Hey @cocoonkid projects templates sounds interesting. Can you give us one brief example of a kind of project template you would want to create along with pre-populate issues and sub-issues?

[tracure1337]

Apology for the late reply.

For example a pen test/ vulnerability research project.

Here is an example for a re-occuring template.

Initial Subdomain Enumeration

• [ ] Run subfinder with recursive option

subfinder -d domain.com -all -recursive > subs_domain.com.txt

Live Host Detection

• [ ] Filter live hosts using httpx

cat subs_domain.com.txt | httpx -td -title -sc -ip > httpx_domain.com.txt
cat httpx_domain.com.txt | awk '{print $1}' > live_subs_domain.txt

Automated Vulnerability Scanning

• [ ] Run Nuclei with rate limiting

nuclei -l live_subs_domain.com.txt -rl 10 -bs 2 -c 2 -as -silent -s critical,high,medium

WAF Detection

• [ ] Identify hosts with WAF (403 responses)

cat httpx_domain.com.txt | grep 403

• [ ] Check for common WAFs:
  • [ ] Amazon Cloudfront
  • [ ] Cloudflare
  • [ ] Imperva
  • [ ] Akamai
  • [ ] F5
  • [ ] Barracuda
  • [ ] Fortinet
  • [ ] Azure WAF
  • [ ] Radware
  • [ ] Sucuri

Non-WAF Analysis

• [ ] Filter subdomains without WAF

cat httpx_domain.com.txt | grep -v -i -E 'cloudfront|imperva|cloudflare' > nowaf_subs_domain.com.txt

• [ ] Extract 403 responses from non-WAF subdomains

cat nowaf_subs_domain.com.txt | grep 403 | awk '{print $1}' > 403_subs_domain.txt

Fuzzing

• [ ] Run default wordlist fuzzing

dirsearch -u https://sub.domain.com -x 403,404,500,400,502,503,429 --random-agent

• [ ] Perform extension-based fuzzing

dirsearch -u https://sub.domain.com -e xml,json,sql,db,log,yml,yaml,bak,txt,tar.gz,zip -x 403,404,500,400,502,503,429 --random-agent

Exploit Research

• [ ] Search for public exploits
• [ ] Use ChatGPT for exploit assistance
• [ ] Google dork for specific vulnerabilities

Targeted Wordlist Fuzzing

• [ ] Install and locate appropriate wordlists

sudo apt install seclists

• [ ] Run service-specific fuzzing
• [ ] Perform database file fuzzing

mkdir db_wordlists
wget https://raw.githubusercontent.com/dkcyberz/Harpy/refs/heads/main/Hidden/database.txt

Manual Review

• [ ] Visit non-WAF subdomains manually
• [ ] Check interesting 403 responses
• [ ] Document potential vulnerabilities

Initial URL Extraction

• [ ] Run waymore

waymore -i domain.com -mode U -oU waymore_domain.com.txt

• [ ] Backup method: waybackurls

waybackurls domain.com > wayback_domain.com.txt

Pattern Searching

Identity Patterns

• [ ] Search for UUIDs

grep -Eo '[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}'

• [ ] Find JWT tokens

grep "eyJ"

• [ ] Check SSNs

grep -Eo '\b[0-9]{3}-[0-9]{2}-[0-9]{4}\b'

Sensitive Data

• [ ] Credit card numbers

grep -Eo '\b[0-9]{13,16}\b'

• [ ] Session IDs/cookies

grep -Eo '[a-zA-Z0-9]{32,}'

• [ ] Tokens and secrets
  • [ ] Search "token"
  • [ ] Search "code"
  • [ ] Search "secret"

Network Information

• [ ] Private IP addresses
• [ ] IPv4 addresses
• [ ] IPv6 addresses

Payment Information

• [ ] Check for:
  • [ ] payment
  • [ ] order/orderid
  • [ ] payid
  • [ ] invoice

API Endpoints

• [ ] Look for:
  • [ ] /api/
  • [ ] api.
  • [ ] graphql
• [ ] Check API versions:
  • [ ] /v1/
  • [ ] /v2/
  • [ ] /v3/
  • [ ] /v4/
  • [ ] /v5/

Authentication Systems

• [ ] Search for:
  • [ ] sso
  • [ ] saml
  • [ ] oauth
  • [ ] auth
  • [ ] callback

File Exposures

• [ ] Check for sensitive files:
  • [ ] .env
  • [ ] .yaml/.yml
  • [ ] .json
  • [ ] .xml
  • [ ] .log
  • [ ] .sql
  • [ ] .backup
  • [ ] .key
  • [ ] .pem
  • [ ] .conf
  • [ ] .pdf
  • [ ] .xlsx

Google Dork Searches

• [ ] Run dorks for file extensions
• [ ] Search for confidential markers:
  • [ ] "CONFIDENTIAL"
  • [ ] "INTERNAL USE ONLY"
  • [ ] "HIGHLY CONFIDENTIAL"
  • [ ] "PRIVATE USE ONLY"
• [ ] Translate and search confidential markers in other languages

Documentation

• [ ] Document all findings
• [ ] Screenshot evidence
• [ ] Prepare report
• [ ] Test findings for active vulnerabilities