Skip to content

v1.2.0

Choose a tag to compare

View all tags
@0xQRx 0xQRx released this 21 Feb 22:07
· 88 commits to main since this release
v1.2.0
f27f08d

ScopeFinder Updates

Enhancements & New Integrations

JSHunter Improvements

  • Reduced false positives.
  • Added searches for AWS Cognito-specific elements:
    • Identity pools
    • Role definitions

LinkFinder Integration

  • Now extracts links from JavaScript files.

Enhanced URL Processing

  • Integrated uro and urldedup to generate lists of active URLs with parameters.
  • These lists can be used for vulnerability scanning (e.g., Burp Active Scanner – see README for special extension details).

API Key Requirement

  • ScopeFinder now requires two additional API keys:
    • URLScan
    • VirusTotal
  • These should be added to your .zshrc file.

Godigger Integration

  • Now fetching IPs reported by:
    • VirusTotal
    • AlienVault
  • Also continues to gather subdomains and URLs from multiple sources.

X8 Parameter Mining

  • Extracts additional parameters from URLs that:
    • Already have some parameters.
    • Are confirmed as valid (reachable).
Assets 2
Loading