Skip to content

feat(scope): read the targets of web and TLS tools (step 5, PR 4b) #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mkhellat merged 4 commits into from
Nov 12, 2026
Merged

feat(scope): read the targets of web and TLS tools (step 5, PR 4b) #20

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
94679c0
feat(scope): read the targets of web and TLS tools
mkhellat Nov 12, 2026
a510d52
fix(scope): refuse environment assignments before a network tool
mkhellat Nov 12, 2026
e277f24
fix(scope): read sslscan as it reads itself; refuse testssl --phone-out
mkhellat Nov 12, 2026
bfb06cb
fix(scope): keep appended words out of the host
mkhellat Nov 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions docs/chapters/architecture.texi
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -638,8 +638,9 @@ src/codebud/ the package
src/codebud_sec/ the security layer (authorized security work)
├── engagement.py engagement file: authorized scope
├── scope.py scope guard: every network target read from the
│ command line and checked; registered with the
│ core's safety.add_step_check()
│ command line and checked (DNS tools, scanners,
│ nc, web clients, fuzzers, TLS scanners);
│ registered with the core's safety.add_step_check()
└── evidence.py hash-chained, append-only evidence log,
encrypted at rest (appends need no passphrase)

Expand Down
3 changes: 3 additions & 0 deletions docs/chapters/development.texi
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,6 +168,9 @@ tests/
├── test_scope.py engagement scope: targets read per tool,
│ third parties, ranges, active refused,
│ passive asked
├── test_scope_web.py engagement scope for web and TLS tools:
│ URL hosts read strictly, proxies, redirects
│ and fuzz words in the host refused
├── test_skill.py SKILL.md variants (default, Agensi), skill CLI
├── test_step_environment.py steps never see the passphrase or secret
│ settings (any privacy level)
Expand Down
Loading
Loading