added raw request handling, enanched attack detection for GET and POSTS, templatized suspicioius activity to fetch from wordlists.json, aligned helm to load new wordlist config, added migration scripts from 1.0.0 to new krawl versions, removed old and unused functions, added test scripts

This commit is contained in:
Patrick Di Fazio
2026-02-08 16:02:18 +01:00
parent 594eae7447
commit 771174c6a9
26 changed files with 2312 additions and 867 deletions

View File

@@ -103,6 +103,26 @@ class Wordlists:
def directory_dirs(self):
return self._data.get("directory_listing", {}).get("directories", [])
@property
def directory_listing(self):
return self._data.get("directory_listing", {})
@property
def fake_passwd(self):
return self._data.get("fake_passwd", {})
@property
def fake_shadow(self):
return self._data.get("fake_shadow", {})
@property
def xxe_responses(self):
return self._data.get("xxe_responses", {})
@property
def command_outputs(self):
return self._data.get("command_outputs", {})
@property
def error_codes(self):
return self._data.get("error_codes", [])
@@ -123,6 +143,18 @@ class Wordlists:
def server_headers(self):
return self._data.get("server_headers", [])
@property
def suspicious_patterns(self):
return self._data.get("suspicious_patterns", [])
@property
def username_fields(self):
return self._data.get("credential_fields", {}).get("username_fields", [])
@property
def password_fields(self):
return self._data.get("credential_fields", {}).get("password_fields", [])
@property
def attack_urls(self):
"""Deprecated: use attack_patterns instead. Returns attack_patterns for backward compatibility."""