mirror of
https://github.com/Vyntral/god-eye.git
synced 2026-08-21 09:17:17 +02:00
v0.1.1: Major AI improvements, new security modules, and documentation fixes
## AI & CVE Improvements - Fix AI report to display actual subdomain names instead of generic placeholders - Add 10-year CVE filter to reduce false positives from outdated vulnerabilities - Integrate CISA KEV (Known Exploited Vulnerabilities) database support - Improve AI analysis prompt for more accurate security findings ## New Security Modules - Add wildcard DNS detection with multi-phase validation (DNS + HTTP) - Add TLS certificate analyzer for certificate chain inspection - Add comprehensive rate limiting module for API requests - Add retry mechanism with exponential backoff - Add stealth mode for reduced detection during scans - Add progress tracking module for better UX ## Code Refactoring - Extract scanner output logic to dedicated module - Add base source interface for consistent passive source implementation - Reduce admin panel paths to common generic patterns only - Improve HTTP client with connection pooling - Add JSON output formatter ## Documentation Updates - Correct passive source count to 20 (was incorrectly stated as 34) - Fix AI model names: deepseek-r1:1.5b (fast) + qwen2.5-coder:7b (deep) - Update all markdown files for consistency - Relocate demo GIFs to assets/ directory - Add benchmark disclaimer for test variability ## Files Changed - 4 documentation files updated (README, AI_SETUP, BENCHMARK, EXAMPLES) - 11 new source files added - 12 existing files modified
This commit is contained in:
+3
-3
@@ -92,7 +92,7 @@ time ./god-eye -d target.com --enable-ai --no-brute
|
||||
React version 16.8.0 has known XSS vulnerability
|
||||
Missing rate limiting on /api/v1/users endpoint
|
||||
(1 more findings...)
|
||||
model: phi3.5:3.8b→qwen2.5-coder:7b
|
||||
model: deepseek-r1:1.5b→qwen2.5-coder:7b
|
||||
CVE: React: CVE-2020-15168 - XSS vulnerability in development mode
|
||||
═══════════════════════════════════════════════════
|
||||
```
|
||||
@@ -100,7 +100,7 @@ time ./god-eye -d target.com --enable-ai --no-brute
|
||||
### AI Report Section
|
||||
|
||||
```
|
||||
🧠 AI-POWERED ANALYSIS (cascade: phi3.5:3.8b + qwen2.5-coder:7b)
|
||||
🧠 AI-POWERED ANALYSIS (cascade: deepseek-r1:1.5b + qwen2.5-coder:7b)
|
||||
Analyzing findings with local LLM
|
||||
|
||||
AI:C api.example.com → 4 findings
|
||||
@@ -336,7 +336,7 @@ time ./god-eye -d target.com --enable-ai --ai-deep --no-brute
|
||||
|
||||
# Use fast model only (skip deep analysis)
|
||||
./god-eye -d large-target.com --enable-ai --ai-cascade=false \
|
||||
--ai-deep-model phi3.5:3.8b
|
||||
--ai-deep-model deepseek-r1:1.5b
|
||||
|
||||
# Disable AI for initial enumeration, enable for interesting findings
|
||||
./god-eye -d large-target.com --no-brute -s > subdomains.txt
|
||||
|
||||
Reference in New Issue
Block a user