- targets/top50.txt — 50 most popular websites for daily scanning
- scan-batch.sh — batch scanner that iterates through targets
in quick mode, logs findings, tracks progress
- cron job 'analyzer-daily-batch' runs at 2 AM daily
- Uses perl-based timeout for macOS compat (no GNU timeout)
- Shuffles targets each run for variety
- New discovery engine (engine/discovery.sh): crawls target for real
URLs, forms, parameters, and API endpoints before attacking
- New nuclei vector (21): runs nuclei templates for real CVE detection
(critical/high/medium severity)
- Rebuilt SQLi vector: tests discovered forms and URL params with
error-based and time-based blind payloads, sqlmap injection
- Rebuilt XSS vector: multi-context payloads against discovered
forms/params, confirms payload reflection
- Rebuilt LFI vector: tests all discovered and common file parameters
with traversal payloads, confirms by reading /etc/passwd
- Updated main analyzer with 5-step pipeline: connectivity →
discovery → recon → Ollama brain → exploitation
