StasonJatham fe5c01666b bucket discovery: no name guessing ...

Remove all fabricated candidate names (suffixes and the wordlist). Discovery now
only tests names that actually occur in the incoming hostname: the subdomain
label and the registrable-domain label (assets.example.com -> assets, example).
Nothing is permuted or drawn from a wordlist.

2026-09-22 16:09:44 +02:00

..

classify

drop MRAP and CloudFront from findings

2026-09-22 15:36:08 +02:00

config

bucket discovery: no name guessing

2026-09-22 16:09:44 +02:00

discover

bucket discovery: no name guessing

2026-09-22 16:09:44 +02:00

dns

provider capability model, on-demand scan/backfill, more providers

2026-09-22 14:47:49 +02:00

index

provider capability model, on-demand scan/backfill, more providers

2026-09-22 14:47:49 +02:00

metrics

bucket discovery engine: CT domain -> candidate names -> listing index

2026-09-22 15:53:31 +02:00

model

bucket discovery engine: CT domain -> candidate names -> listing index

2026-09-22 15:53:31 +02:00

pipeline

bucket discovery engine: CT domain -> candidate names -> listing index

2026-09-22 15:53:31 +02:00

probe

clarify HTTP 200 detail: anonymous access, not listing

2026-09-22 15:29:28 +02:00

scan

parallel backfill, persist scanned exposure, random-sample DNS queue

2026-09-22 15:09:34 +02:00

store

provider capability model, on-demand scan/backfill, more providers

2026-09-22 14:47:49 +02:00

webui

parallel backfill, persist scanned exposure, random-sample DNS queue

2026-09-22 15:09:34 +02:00