noir
noir copied to clipboard
Attack surface detector that identifies endpoints by static analysis
The "--send-proxy" flag sends actual web requests to the target server. In contrast, the new flags(`--send-zap` `--send-caido`) communicates directly with ZAP or Caido without initiating web requests.
- Ref: https://github.com/hahwul/deadfinder/tree/main/github-action
Similar to https://github.com/secdec/attack-surface-detector-zap :D > However, I don't know if ZAP Addon can install and run the binary 😵💫
The current analyzer employs a fundamental string parsing logic (regular expressions, string splitting ..), which means that it is not guaranteed to be 100% accurate. This is because some characters,...
Bumps [rexml](https://github.com/ruby/rexml) from 3.3.2 to 3.3.3. Release notes Sourced from rexml's releases. REXML 3.3.3 - 2024-08-01 Improvements Added support for detecting invalid XML that has unsupported content before root element...
e.g `DetectorGoEcho` -> `Detector::Go::Echo`