Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Requets: Passive mode #51

Open
bcoles opened this issue Aug 3, 2018 · 3 comments
Open

Feature Requets: Passive mode #51

bcoles opened this issue Aug 3, 2018 · 3 comments

Comments

@bcoles
Copy link
Contributor

bcoles commented Aug 3, 2018

It would be nice to have a --passive mode, that disables all modules which interact with the target domain, and enables all modules which do not interact with the target domain.

Currently, to do this requires specifying individual modules with -t.

@whoot
Copy link

whoot commented Sep 7, 2018

Are there even modules which interact with the target domain?
I mean all results are coming from search engines, arent they?

@bcoles
Copy link
Contributor Author

bcoles commented Sep 7, 2018

@whoot

Yes, there are modules which interact with the target domain, for example:

  • The HtmlScrape module "scrapes the target website for emails and data".
  • The Google modules search Google for documents which may contain email addresses, then download these documents. The module specifically avoids downloading modules from Google's cache. As such, the module may download documents from the target domain.
  • The Exalead modules likely also operate in a similar fashion to the Google modules, although I haven't checked.

While it's possible to specify individual modules with -t, or modify the INI configuration file to disable some modules, this requires knowledge of which modules interact with the target domain.

It's not immediately obvious to the operator which modules interact with the target domain and which modules do not.

As such, it would be nice to have a --passive mode, that runs all modules which do not interact with the target domain.

@whoot
Copy link

whoot commented Sep 7, 2018

Alright, thanks for clarification.
This stuff is indeed not easy to spot. Passive mode would be great!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants