intrigueio / intrigue-ident

Application and Service Fingerprinting
https://core.intrigue.io
Other
131 stars 40 forks source link

Content checks should be less verbose #11

Closed jcran closed 4 years ago

jcran commented 5 years ago

See #8 as well, but this sort of verbosity around content checks is unnecessary. Save it for the JSON/CSV output. For the CLI, only print stuff that would be useful to a tester.

Specifically:


Checking URL: http://127.0.0.1/
Checking... http://127.0.0.1/
Fingerprint:
 - Apache HTTP Server 2.4.41  - Apache web server - server header - with versions (CPE: cpe:2.3:a:apache:http_server:2.4.41:) (Tags: ["Web Server"])
Content Checks:
 - Access-Control-Allow-Origin Header: false
 - P3P Header: false
 - X-Frame-Options Header: false
 - X-XSS-Protection Header: false
 - Google Analytics Account Detected: false
 - Location Header: 
 - Directory Listing Detected: false
 - Form Detected: false
 - File Upload Form Detected: false
 - Email Addresses Detected: []
 - Authentication - HTTP: false
 - Authentication - Session Identifier: false````

via @bcoles 
jcran commented 4 years ago

CAlling this done