noir icon indicating copy to clipboard operation
noir copied to clipboard

Attack surface detector that identifies endpoints by static analysis

Results 24 noir issues
Sort by recently updated
recently updated
newest added

`--diff-path` flag in BASE

💡 enhancement

#232 cc @sm1ee @Dyrandy

🔬 analyzer
🥢 mini-lexer

The "--send-proxy" flag sends actual web requests to the target server. In contrast, the new flags(`--send-zap` `--send-caido`) communicates directly with ZAP or Caido without initiating web requests.

💡 enhancement
💌 deliver

- Ref: https://github.com/hahwul/deadfinder/tree/main/github-action

🦺 github-action

Similar to https://github.com/secdec/attack-surface-detector-zap :D > However, I don't know if ZAP Addon can install and run the binary 😵‍💫

The current analyzer employs a fundamental string parsing logic (regular expressions, string splitting ..), which means that it is not guaranteed to be 100% accurate. This is because some characters,...

Bumps [rexml](https://github.com/ruby/rexml) from 3.3.2 to 3.3.3. Release notes Sourced from rexml's releases. REXML 3.3.3 - 2024-08-01 Improvements Added support for detecting invalid XML that has unsupported content before root element...

📑 documentation
⛓️ dependencies
ruby

e.g `DetectorGoEcho` -> `Detector::Go::Echo`