JIN v2.3.0

What's new in v2.3.0

Interactive REPL

• Run jin with no arguments for a readline-powered interactive shell: tab completion, persisted command history (~/.jin_history), and Ctrl+C to abort in-flight scans and exit cleanly.
• help, exit/quit, and Ctrl+D (EOF) supported; a plain line-reader fallback kicks in when stdin is not a TTY.

tech-stack module

• Fingerprint websites across 13 categories (CMS, web servers, frameworks, JS libraries, CSS, CDN, WAF, analytics, security, and more). Every detection includes a confidence level and the concrete evidence that triggered it.
• --subdomains / -s flag: passive subdomain discovery via certificate transparency logs (crt.sh) plus DNS record lookup (nameservers, MX, TXT). Each discovered subdomain is fingerprinted independently.

Hexagonal architecture

• Full refactor into domain / application / ports-and-adapters layers with a composition root in cmd/main.go, making the codebase easier to test and extend.

info module enhancements

• Weighted security report (0-100 score, A+ to F grade) covering TLS, HSTS, Content-Security-Policy (with lint warnings), X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy, cookie flags, CORS, and version disclosure.
• Cookie values are redacted in output; cloud provider detection (Google Cloud, Cloudflare, Microsoft Azure).

Other

• HTTP scanner improvements and dependency updates (golang.org/x/net).
• Docker images tagged wahyouka/jin:v2.3.0-*.

Getting started

bash git clone https://github.com/sapiuwu/jin.git && cd jin && go build -o jin ./cmd/ ./jin
Docker:
bash docker pull wahyouka/jin:v2.3.0 docker run -it --entrypoint jin wahyouka/jin:v2.3.0