1 line
11 KiB
JSON
1 line
11 KiB
JSON
{"repo": "akcayfx/vulnhunter", "files": {"config/default.yaml": {"106177b4e0a6bb31a924de1b7f770c7b64bf782b": {"t": 1785746317.7115684, "n": 2741, "h": "7048052ce64b2f93", "c": "scanner:\n timeout: 60\n max_concurrent: 100\n stealth_mode: \"normal\" # quiet, normal, aggressive\n\nstealth:\n mode: \"normal\"\n max_rps: 10\n request_jitter_ms: [100, 500]\n user_agents: \"rotate\" # rotate, static, browser\n proxy: null\n waf_detection: true\n respect_robots_txt: true\n respect_rate_limit_headers: true\n\ntools:\n port_scanner:\n enabled: true\n default_ports: [21, 22, 23, 25, 53, 80, 110, 135, 139, 143, 443, 445, 993, 995, 1433, 1521, 3306, 3389, 5432, 5900, 6379, 8080, 8443, 8888, 9200, 27017]\n connect_timeout: 2\n header_analyzer:\n enabled: true\n ssl_checker:\n enabled: true\n dns_enum:\n enabled: true\n whois_lookup:\n enabled: true\n dir_bruteforce:\n enabled: true\n wordlist: \"common\"\n max_requests: 200\n cve_lookup:\n enabled: true\n web_vuln_scanner:\n enabled: true\n test_sqli: true\n test_xss: true\n test_open_redirect: true\n web_scraper:\n enabled: true\n shodan_search:\n enabled: true\n search_engine:\n enabled: true\n subdomain_enum:\n enabled: true\n tech_fingerprint:\n enabled: true\n # Bug Bounty Recon Pipeline\n url_harvester:\n enabled: true\n limit: 500\n js_analyzer:\n enabled: true\n max_js_files: 20\n param_discovery:\n enabled: true\n takeover_check:\n enabled: true\n cors_check:\n enabled: true\n # Advanced Vulnerability Detection (Phase 5)\n ssrf_detector:\n enabled: true\n idor_detector:\n enabled: true\n host_header_injection:\n enabled: true\n access_control_test:\n enabled: true\n graphql_test:\n enabled: true\n # Pro tools (require Docker sandbox)\n nmap_scan:\n enabled: true\n nuclei_scan:\n enabled: true\n ffuf_scan:\n enabled: true\n sqlmap_scan:\n enabled: true\n nikto_scan:\n enabled: true\n httpx_probe:\n enabled: true\n subfinder_enum:\n enabled: true\n katana_crawl:\n enabled: true\n\nai:\n enabled: true\n # Provider auto-detected from env vars. Override with LLM_PROVIDER env var.\n # Supported: deepseek, openai, anthropic, gemini, ollama, openrouter, groq\n # provider: \"deepseek\"\n # model: \"deepseek-chat\"\n # base_url: \"https://api.deepseek.com/v1\"\n max_tokens: 8000\n max_tool_calls: 30\n\nagents:\n orchestrator:\n enabled: true\n recon:\n enabled: true\n exploit:\n enabled: true\n reporter:\n enabled: true\n\nreporting:\n output_dir: \"./reports\"\n formats: [\"json\", \"html\"]\n\n# Pro tools (Nmap, Nuclei, …) need enabled: true plus a built image; CLI --sandbox also turns this on.\n# net_raw: grant NET_RAW (recommended for nmap). net_admin: optional NET_ADMIN (PentAGI-style).\nsandbox:\n enabled: false\n image: \"vulnhunter-sandbox:latest\"\n network: \"vulnhunter-sandbox\"\n timeout: 300\n net_raw: true\n net_admin: false\n\nui:\n host: \"127.0.0.1\"\n port: 8477\n"}, "470aef05dd999e5dda3d1122df852efba1f46e81": {"t": 1785761761.039372, "n": 2741, "h": "7048052ce64b2f93", "c": "scanner:\n timeout: 60\n max_concurrent: 100\n stealth_mode: \"normal\" # quiet, normal, aggressive\n\nstealth:\n mode: \"normal\"\n max_rps: 10\n request_jitter_ms: [100, 500]\n user_agents: \"rotate\" # rotate, static, browser\n proxy: null\n waf_detection: true\n respect_robots_txt: true\n respect_rate_limit_headers: true\n\ntools:\n port_scanner:\n enabled: true\n default_ports: [21, 22, 23, 25, 53, 80, 110, 135, 139, 143, 443, 445, 993, 995, 1433, 1521, 3306, 3389, 5432, 5900, 6379, 8080, 8443, 8888, 9200, 27017]\n connect_timeout: 2\n header_analyzer:\n enabled: true\n ssl_checker:\n enabled: true\n dns_enum:\n enabled: true\n whois_lookup:\n enabled: true\n dir_bruteforce:\n enabled: true\n wordlist: \"common\"\n max_requests: 200\n cve_lookup:\n enabled: true\n web_vuln_scanner:\n enabled: true\n test_sqli: true\n test_xss: true\n test_open_redirect: true\n web_scraper:\n enabled: true\n shodan_search:\n enabled: true\n search_engine:\n enabled: true\n subdomain_enum:\n enabled: true\n tech_fingerprint:\n enabled: true\n # Bug Bounty Recon Pipeline\n url_harvester:\n enabled: true\n limit: 500\n js_analyzer:\n enabled: true\n max_js_files: 20\n param_discovery:\n enabled: true\n takeover_check:\n enabled: true\n cors_check:\n enabled: true\n # Advanced Vulnerability Detection (Phase 5)\n ssrf_detector:\n enabled: true\n idor_detector:\n enabled: true\n host_header_injection:\n enabled: true\n access_control_test:\n enabled: true\n graphql_test:\n enabled: true\n # Pro tools (require Docker sandbox)\n nmap_scan:\n enabled: true\n nuclei_scan:\n enabled: true\n ffuf_scan:\n enabled: true\n sqlmap_scan:\n enabled: true\n nikto_scan:\n enabled: true\n httpx_probe:\n enabled: true\n subfinder_enum:\n enabled: true\n katana_crawl:\n enabled: true\n\nai:\n enabled: true\n # Provider auto-detected from env vars. Override with LLM_PROVIDER env var.\n # Supported: deepseek, openai, anthropic, gemini, ollama, openrouter, groq\n # provider: \"deepseek\"\n # model: \"deepseek-chat\"\n # base_url: \"https://api.deepseek.com/v1\"\n max_tokens: 8000\n max_tool_calls: 30\n\nagents:\n orchestrator:\n enabled: true\n recon:\n enabled: true\n exploit:\n enabled: true\n reporter:\n enabled: true\n\nreporting:\n output_dir: \"./reports\"\n formats: [\"json\", \"html\"]\n\n# Pro tools (Nmap, Nuclei, …) need enabled: true plus a built image; CLI --sandbox also turns this on.\n# net_raw: grant NET_RAW (recommended for nmap). net_admin: optional NET_ADMIN (PentAGI-style).\nsandbox:\n enabled: false\n image: \"vulnhunter-sandbox:latest\"\n network: \"vulnhunter-sandbox\"\n timeout: 300\n net_raw: true\n net_admin: false\n\nui:\n host: \"127.0.0.1\"\n port: 8477\n"}, "4e72bfae41dffd233d0a17435018c86d0583c385": {"t": 1785761762.26127, "n": 2610, "h": "4d1fc962d7505621", "c": "scanner:\n timeout: 60\n max_concurrent: 100\n stealth_mode: \"normal\" # quiet, normal, aggressive\n\nstealth:\n mode: \"normal\"\n max_rps: 10\n request_jitter_ms: [100, 500]\n user_agents: \"rotate\" # rotate, static, browser\n proxy: null\n waf_detection: true\n respect_robots_txt: true\n respect_rate_limit_headers: true\n\ntools:\n port_scanner:\n enabled: true\n default_ports: [21, 22, 23, 25, 53, 80, 110, 135, 139, 143, 443, 445, 993, 995, 1433, 1521, 3306, 3389, 5432, 5900, 6379, 8080, 8443, 8888, 9200, 27017]\n connect_timeout: 2\n header_analyzer:\n enabled: true\n ssl_checker:\n enabled: true\n dns_enum:\n enabled: true\n whois_lookup:\n enabled: true\n dir_bruteforce:\n enabled: true\n wordlist: \"common\"\n max_requests: 200\n cve_lookup:\n enabled: true\n web_vuln_scanner:\n enabled: true\n test_sqli: true\n test_xss: true\n test_open_redirect: true\n web_scraper:\n enabled: true\n shodan_search:\n enabled: true\n search_engine:\n enabled: true\n subdomain_enum:\n enabled: true\n tech_fingerprint:\n enabled: true\n # Bug Bounty Recon Pipeline\n url_harvester:\n enabled: true\n limit: 500\n js_analyzer:\n enabled: true\n max_js_files: 20\n param_discovery:\n enabled: true\n takeover_check:\n enabled: true\n cors_check:\n enabled: true\n # Advanced Vulnerability Detection (Phase 5)\n ssrf_detector:\n enabled: true\n idor_detector:\n enabled: true\n host_header_injection:\n enabled: true\n access_control_test:\n enabled: true\n graphql_test:\n enabled: true\n # Pro tools (require Docker sandbox)\n nmap_scan:\n enabled: true\n nuclei_scan:\n enabled: true\n ffuf_scan:\n enabled: true\n sqlmap_scan:\n enabled: true\n nikto_scan:\n enabled: true\n httpx_probe:\n enabled: true\n subfinder_enum:\n enabled: true\n katana_crawl:\n enabled: true\n\nai:\n enabled: true\n # Provider auto-detected from env vars. Override with LLM_PROVIDER env var.\n # Supported: deepseek, openai, anthropic, gemini, ollama, openrouter, groq\n # provider: \"deepseek\"\n # model: \"deepseek-chat\"\n # base_url: \"https://api.deepseek.com/v1\"\n max_tokens: 8000\n max_tool_calls: 30\n\nagents:\n orchestrator:\n enabled: true\n recon:\n enabled: true\n exploit:\n enabled: true\n reporter:\n enabled: true\n\nreporting:\n output_dir: \"./reports\"\n formats: [\"json\", \"html\"]\n\n# Pro tools (Nmap, Nuclei, …) need enabled: true plus a built image; CLI --sandbox also turns this on.\nsandbox:\n enabled: false\n image: \"vulnhunter-sandbox:latest\"\n network: \"vulnhunter-sandbox\"\n timeout: 300\n\nui:\n host: \"127.0.0.1\"\n port: 8477\n"}, "7b56367c5249528edf1d33167d8eb7d7e75a52c1": {"t": 1785761763.9350204, "n": 2507, "h": "491adbcf54777db9", "c": "scanner:\n timeout: 60\n max_concurrent: 100\n stealth_mode: \"normal\" # quiet, normal, aggressive\n\nstealth:\n mode: \"normal\"\n max_rps: 10\n request_jitter_ms: [100, 500]\n user_agents: \"rotate\" # rotate, static, browser\n proxy: null\n waf_detection: true\n respect_robots_txt: true\n respect_rate_limit_headers: true\n\ntools:\n port_scanner:\n enabled: true\n default_ports: [21, 22, 23, 25, 53, 80, 110, 135, 139, 143, 443, 445, 993, 995, 1433, 1521, 3306, 3389, 5432, 5900, 6379, 8080, 8443, 8888, 9200, 27017]\n connect_timeout: 2\n header_analyzer:\n enabled: true\n ssl_checker:\n enabled: true\n dns_enum:\n enabled: true\n whois_lookup:\n enabled: true\n dir_bruteforce:\n enabled: true\n wordlist: \"common\"\n max_requests: 200\n cve_lookup:\n enabled: true\n web_vuln_scanner:\n enabled: true\n test_sqli: true\n test_xss: true\n test_open_redirect: true\n web_scraper:\n enabled: true\n shodan_search:\n enabled: true\n search_engine:\n enabled: true\n subdomain_enum:\n enabled: true\n tech_fingerprint:\n enabled: true\n # Bug Bounty Recon Pipeline\n url_harvester:\n enabled: true\n limit: 500\n js_analyzer:\n enabled: true\n max_js_files: 20\n param_discovery:\n enabled: true\n takeover_check:\n enabled: true\n cors_check:\n enabled: true\n # Advanced Vulnerability Detection (Phase 5)\n ssrf_detector:\n enabled: true\n idor_detector:\n enabled: true\n host_header_injection:\n enabled: true\n access_control_test:\n enabled: true\n graphql_test:\n enabled: true\n # Pro tools (require Docker sandbox)\n nmap_scan:\n enabled: true\n nuclei_scan:\n enabled: true\n ffuf_scan:\n enabled: true\n sqlmap_scan:\n enabled: true\n nikto_scan:\n enabled: true\n httpx_probe:\n enabled: true\n subfinder_enum:\n enabled: true\n katana_crawl:\n enabled: true\n\nai:\n enabled: true\n # Provider auto-detected from env vars. Override with LLM_PROVIDER env var.\n # Supported: deepseek, openai, anthropic, gemini, ollama, openrouter, groq\n # provider: \"deepseek\"\n # model: \"deepseek-chat\"\n # base_url: \"https://api.deepseek.com/v1\"\n max_tokens: 8000\n max_tool_calls: 30\n\nagents:\n orchestrator:\n enabled: true\n recon:\n enabled: true\n exploit:\n enabled: true\n reporter:\n enabled: true\n\nreporting:\n output_dir: \"./reports\"\n formats: [\"json\", \"html\"]\n\nsandbox:\n enabled: false\n image: \"vulnhunter-sandbox:latest\"\n network: \"vulnhunter-sandbox\"\n timeout: 300\n\nui:\n host: \"127.0.0.1\"\n port: 8477\n"}}}} |