mirror of
https://github.com/Vyntral/god-eye.git
synced 2026-05-16 13:39:10 +02:00
Vyntral
3a4c230aa7
Complete architectural overhaul. Replaces the v0.1 monolithic scanner with an event-driven pipeline of auto-registered modules. Foundation (internal/): - eventbus: typed pub/sub, 20 event types, race-safe, drop counter - module: registry with phase-based selection - store: thread-safe host store with per-host locks + deep-copy reads - pipeline: coordinator with phase barriers + panic recovery - config: 5 scan profiles + 3 AI tiers + YAML loader + auto-discovery Modules (26 auto-registered across 6 phases): - Discovery: passive (26 sources), bruteforce, recursive, AXFR, GitHub dorks, CT streaming, permutation, reverse DNS, vhost, ASN, supply chain (npm + PyPI) - Enrichment: HTTP probe + tech fingerprint + TLS appliance ID, ports - Analysis: security checks, takeover (110+ sigs), cloud, JavaScript, GraphQL, JWT, headers (OWASP), HTTP smuggling, AI cascade, Nuclei - Reporting: TXT/JSON/CSV writer + AI scan brief AI layer (internal/ai/ + internal/modules/ai/): - Three profiles: lean (16 GB), balanced (32 GB MoE), heavy (64 GB) - Six event-driven handlers: CVE, JS file, HTTP response, secret filter, multi-agent vuln enrichment, anomaly + executive report - Content-hash cache dedups Ollama calls across hosts - Auto-pull of missing models via /api/pull with streaming progress - End-of-scan AI SCAN BRIEF in terminal with top chains + next actions Nuclei compat layer (internal/nucleitpl/): - Executes ~13k community templates (HTTP subset) - Auto-download of nuclei-templates ZIP to ~/.god-eye/nuclei-templates - Scope filter rejects off-host templates (eliminates OSINT FPs) Operations: - Interactive wizard (internal/wizard/) — zero-flag launch - LivePrinter (internal/tui/) — colorized event stream - Diff engine + scheduler (internal/diff, internal/scheduler) for continuous ASM monitoring with webhook alerts - Proxy support (internal/proxyconf/): http / https / socks5 / socks5h + basic auth Fixes #1 — native SOCKS5 / Tor compatibility via --proxy flag. 185 unit tests across 15 packages, all race-detector clean.
81 lines
2.6 KiB
Go
81 lines
2.6 KiB
Go
// Package all is the meta-package imported from main to trigger side-effect
|
|
// registration of every built-in Fase 0.6 adapter module. Importing
|
|
// god-eye/internal/modules/all is equivalent to importing each submodule
|
|
// individually and calling Register().
|
|
//
|
|
// Individual submodules avoid registering in their init() on purpose — that
|
|
// would make the registry state global and prevent tests from using a
|
|
// clean registry. Callers (main, tests) explicitly opt in by importing
|
|
// this package or calling RegisterAll.
|
|
package all
|
|
|
|
import (
|
|
aimod "god-eye/internal/modules/ai"
|
|
"god-eye/internal/modules/asn"
|
|
"god-eye/internal/modules/brief"
|
|
"god-eye/internal/modules/axfr"
|
|
"god-eye/internal/modules/bruteforce"
|
|
"god-eye/internal/modules/cloud"
|
|
"god-eye/internal/modules/ctstream"
|
|
"god-eye/internal/modules/dnsresolve"
|
|
"god-eye/internal/modules/github"
|
|
"god-eye/internal/modules/graphql"
|
|
"god-eye/internal/modules/headers"
|
|
"god-eye/internal/modules/httpprobe"
|
|
"god-eye/internal/modules/javascript"
|
|
"god-eye/internal/modules/jwt"
|
|
"god-eye/internal/modules/nuclei"
|
|
"god-eye/internal/modules/passive"
|
|
"god-eye/internal/modules/permutation"
|
|
"god-eye/internal/modules/ports"
|
|
"god-eye/internal/modules/recursive"
|
|
"god-eye/internal/modules/report"
|
|
"god-eye/internal/modules/reversedns"
|
|
"god-eye/internal/modules/security"
|
|
"god-eye/internal/modules/smuggling"
|
|
"god-eye/internal/modules/supplychain"
|
|
"god-eye/internal/modules/takeover"
|
|
"god-eye/internal/modules/vhost"
|
|
)
|
|
|
|
// RegisterAll registers every Fase 0.6 adapter module in the default
|
|
// registry. Call exactly once at program start — Register panics on
|
|
// duplicates, so calling twice is a bug.
|
|
func RegisterAll() {
|
|
// Discovery (Fase 0 adapters + Fase 1 natives + supply chain from F2)
|
|
passive.Register()
|
|
bruteforce.Register()
|
|
recursive.Register()
|
|
axfr.Register() // F1
|
|
github.Register() // F1
|
|
ctstream.Register() // F1 (opt-in)
|
|
supplychain.Register() // F2
|
|
|
|
// Resolution
|
|
dnsresolve.Register()
|
|
permutation.Register() // F1 (opt-in)
|
|
reversedns.Register() // F1 (opt-in)
|
|
vhost.Register() // F1 (opt-in)
|
|
asn.Register() // F1 (opt-in)
|
|
|
|
// Enrichment
|
|
httpprobe.Register()
|
|
ports.Register()
|
|
|
|
// Analysis (F0 adapters + F2 natives)
|
|
security.Register()
|
|
takeover.Register()
|
|
cloud.Register()
|
|
javascript.Register()
|
|
aimod.Register()
|
|
graphql.Register() // F2
|
|
jwt.Register() // F2
|
|
headers.Register() // F2
|
|
smuggling.Register() // F2 (opt-in)
|
|
nuclei.Register() // F2 (opt-in — requires local nuclei-templates dir)
|
|
|
|
// Reporting
|
|
report.Register()
|
|
brief.Register() // AI-assisted executive summary at scan end
|
|
}
|