sullo

This should extend to all cloud providers to compile the best dataset possible. * All proxies/load balancers * Floating IPs (DO) * Containers

Yes this does seem like it's better to match multiple line always. Question though, have you been running this way since you committed, and if so have there been more...

> sub nikto_tests() calls unslash() for both headers and data. True. However, nikto_tests() is not the only way nfetch() is called. Any case it's called from another location (e.g., another...

I don't know why I stopped looking at this, but yeah, doing the content length call right before sending would be best. I'll see if I can mash all this...

I'm wondering if OPTIONS * check should be removed? My hesitation on this has always been that we don't what sub-urls might have a different option enabled, e.g., `/uploads` might...

$hostname ones are from the 'hostfiles' plugin, which does scan by IP intentionally. This plugin came about because I found a site which had a tgz of the site available...

@drwetter I'm not sure about the other situation--it is possibly due to SNI if you are using that, as I am unable to confirm but I do not have an...

So I see the proper response for zzabcde.testssl.sh in the debug output when requesting /, and the proper 404 response that matches. The base w/o the hostname does not appear,...

I’m not but I’m traveling and have had zero time the last few days. I’ll see if I can get some more time before you terminate it. On Fri, Jan...

What's happening is that _most_ responses are returning the X-Content-Type-Options header, but there is one is one that does not. ``` GET /67b2Zd9Z.php# HTTP/1.1 Host: digi.ninja Connection: Keep-Alive User-Agent: Mozilla/5.0...