mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
46 lines
1.5 KiB
Markdown
46 lines
1.5 KiB
Markdown
# Subdomain Enumeration Report Template
|
|
|
|
## Engagement Details
|
|
- **Target Domain**: [domain]
|
|
- **Date**: [date]
|
|
- **Assessor**: [name]
|
|
- **Scope**: Passive subdomain enumeration only
|
|
|
|
## Executive Summary
|
|
Performed passive subdomain enumeration against [domain] using Subfinder and complementary tools. Discovered [N] unique subdomains, of which [M] are live and responding to HTTP requests.
|
|
|
|
## Methodology
|
|
1. Passive subdomain enumeration using Subfinder with all available sources
|
|
2. DNS resolution and validation using dnsx
|
|
3. HTTP probing with httpx for live host identification
|
|
4. CNAME analysis for subdomain takeover risk assessment
|
|
|
|
## Results Summary
|
|
|
|
| Metric | Count |
|
|
|--------|-------|
|
|
| Total Subdomains Discovered | |
|
|
| Live HTTP Hosts | |
|
|
| Unique IP Addresses | |
|
|
| Subdomain Takeover Candidates | |
|
|
| Cloud-Hosted Subdomains | |
|
|
|
|
## Live Hosts
|
|
|
|
| Subdomain | IP Address | Status Code | Title | Technologies |
|
|
|-----------|-----------|-------------|-------|-------------|
|
|
| | | | | |
|
|
|
|
## Subdomain Takeover Risks
|
|
|
|
| Subdomain | CNAME Target | Service | Risk Level |
|
|
|-----------|-------------|---------|------------|
|
|
| | | | |
|
|
|
|
## Recommendations
|
|
1. Remove dangling DNS records for decommissioned services
|
|
2. Claim or remove CNAME records pointing to unclaimed cloud resources
|
|
3. Restrict access to development and staging subdomains
|
|
4. Implement continuous subdomain monitoring for new asset detection
|
|
5. Review cloud service configurations for publicly accessible resources
|