drjones/th-analyzer
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity
8 Commits 1 Branch 0 Tags
c607277c72f86473ea11d94520a90a637f76c8f3
Commit Graph

8 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
drjones
c607277c72 Fix SSRF v22: baseline fingerprint prevents false positives, limit to 25 fast probes 2026-06-21 16:39:21 -07:00
drjones
d2bc52905d The Analyzer v2.0 — 30 attack vectors, 9 new exploiters 
New vectors added:
- 22: SSRF Proof — cloud metadata exfiltration (CRITICAL)
- 23: Prototype Pollution — Node.js client/server (HIGH)
- 24: WebSocket Hijack — WS origin bypass + injection (HIGH)
- 25: Mass Assignment — protected field modification (HIGH)
- 26: HTTP Parameter Pollution — WAF bypass (HIGH)
- 27: Insecure Deserialization — PHP/Java/Node (CRITICAL)
- 28: OAuth Takeover — redirect_uri / state / CSRF (CRITICAL)
- 29: Web Cache Poisoning — unkeyed header injection (HIGH)
- 30: CRLF Injection — HTTP response splitting (CRITICAL)

All vectors PROVE exploitation by dumping data/credentials,
not just detecting config issues.
 2026-06-21 07:20:21 -07:00
drjones
ab130a88c8 fix vectors panel not loading — onclick handler now integrated in showPanel() 2026-06-20 15:22:35 -07:00
drjones
2627cfdff7 add daily batch scanner + top50 target list + cron job 
- targets/top50.txt — 50 most popular websites for daily scanning
- scan-batch.sh — batch scanner that iterates through targets
  in quick mode, logs findings, tracks progress
- cron job 'analyzer-daily-batch' runs at 2 AM daily
- Uses perl-based timeout for macOS compat (no GNU timeout)
- Shuffles targets each run for variety
 2026-06-20 15:09:59 -07:00
drjones
b3e614f1ba add web GUI — dark hacker interface with real-time SSE output, vector picker, report viewer 2026-06-19 15:41:58 -07:00
drjones
104e0b6bd6 fix nuclei vector flags for v3.9.0 compat 2026-06-19 15:29:50 -07:00
drjones
e832ef3b46 v2: real exploitation — discovery phase, nuclei CVE scanning, SQLi/XSS/LFI rebuild 
- New discovery engine (engine/discovery.sh): crawls target for real
  URLs, forms, parameters, and API endpoints before attacking
- New nuclei vector (21): runs nuclei templates for real CVE detection
  (critical/high/medium severity)
- Rebuilt SQLi vector: tests discovered forms and URL params with
  error-based and time-based blind payloads, sqlmap injection
- Rebuilt XSS vector: multi-context payloads against discovered
  forms/params, confirms payload reflection
- Rebuilt LFI vector: tests all discovered and common file parameters
  with traversal payloads, confirms by reading /etc/passwd
- Updated main analyzer with 5-step pipeline: connectivity →
  discovery → recon → Ollama brain → exploitation
 2026-06-19 06:27:33 -07:00
drjones
eb1fad4ecc The Analyzer v1.0 — autonomous bug bounty engine with 20 attack vectors and Ollama brain 2026-06-19 06:11:40 -07:00