Skip to content

v1.3.0

Latest
Latest

Choose a tag to compare

View all tags
@0xQRx 0xQRx released this 11 Apr 20:34
· 63 commits to main since this release
v1.3.0
44e12bd

🔍 ScopeFinder v1.3.0 – Major Update Release Notes

ScopeFinder has received a substantial update aimed at improving reconnaissance capabilities, scalability, and deeper integration with popular tooling.

⏱️ Runtime & System Requirements

  • Running Time

    • Depending on the target domain and available APIs, execution can take several hours(4-10 hours), especially during large-scale crawling and archive downloads.

  • Minimum Requirements

    • At least 4 GB of RAM

🚀 New Features & Integrations

  • WPScan Integration

    • Automatically detects WordPress instances from Httpx results.
    • Performs plugin/theme/user enumeration using the official WPScan API.
    • New required API: WPSCAN_API_KEY.

  • TruffleHog Integration

    • Performs deep inspection of downloaded and archived JavaScript files for secrets.
    • Complements jshunter for better secret detection coverage.

  • Microsoft Cloud Reconnaissance

    • Integrated msftrecon for gathering cloud-related data.
    • Includes passive enumeration of cloud-hosted infrastructure.

  • SNI-based Cloud Range Discovery

    • Queries external SNI datasets to identify cloud IPs that may match the target domain. (WARNING: grep is performed based on domain and domain base; some results may be false negatives and include domains that are not in scope.)

🔧 Enhanced Tooling Support

  • New Tools Added

    • msftrecon, wpscan, xnLinkFinder, trufflehog

  • Improved DeHashed API Usage

    • Upgraded to POST-based API v2.
    • Now extracts multiple emails per entry and handles credential data more robustly.

  • Expanded JavaScript Endpoint Analysis

    • Uses both xnLinkFinder and linkfinder across multiple datasets:
      • Archived URLs
      • Katana crawled URLs
      • Downloaded JS files

🌐 URL & Endpoint Discovery Improvements

  • Extended URL Coverage

    • New URL collection mode in waymore: Mode B for broader reach.
    • Deeper crawling with katana using tuned parameters for better discovery.

  • Improved JS Download & Management

    • JS endpoints are now hashed and stored uniquely.
    • JS files are downloaded in parallel and reused across tools.

🗂️ Improved Output Structure

  • New output directories:
    • secrets/, cloud/, wpscan/
  • Artifacts and intermediate files (e.g., JS, temp archives) are organized and preserved for reuse.

🛠️ Updated Environment Requirements

  • New required API keys:
    • WPSCAN_API_KEY
  • Help message updated to reflect new requirements and usage examples.

⚠️ Deprecated or Modified

  • DeHashed Email Requirement Removed
    • Now uses API key only via the header.

Happy hacking! 🕵️‍♂️🧠💥

Assets 2
Loading