How fleajion/sawit-framework works
SAWIT is a CLI framework for target reconnaissance and attack-surface reporting. The user supplies a host or URL; the CLI normalizes it, loads YAML configuration, and starts the pipeline engine. The engine dispatches configured stages, collecting per-stage state and workspace artifacts; full scans merge outputs and render reports, while DNS/IP-only mode runs passive collection and skips report generation. README-listed discovery stages are represented at the shared module path, but their individual implementations and wiring were not fully sampled.
Main entry points: engine.py Pipeline Engine · core.py Scan Setup · modules.py Passive Recon · sawit-tools.py CLI
Components 24
Entry and Setup
- CLI
sawit-tools.py - Scan Setup
sawit/core.py - Configuration Loader
sawit/config.py
Recon Pipeline
- Pipeline Engine
sawit/engine.py - Scope Validation
sawit/modules.py - Passive Recon
sawit/modules.py - Active Recon
sawit/modules.py - Content Discovery
sawit/modules.py - JavaScript Recon
sawit/modules.py - Parameter Discovery
sawit/modules.py - API Enumeration
sawit/modules.py - Authentication Mapping
sawit/modules.py - Storage Discovery
sawit/modules.py - Admin Discovery
sawit/modules.py - Cloud Discovery
sawit/modules.py
Correlation and Analysis
- Attack Surface Mapping
sawit/modules.py - Security Analysis
sawit/modules.py - Summary
sawit/modules.py - Output Merger
sawit/normalize.py
Outputs
- Report Renderer
sawit/renderer.py - Scan Workspace
Other components
- User / Team
- DNS Infrastructure
- Target Website
Connections 28
- User / Team → CLI: provides target
- CLI → Scan Setup: starts scan
- Scan Setup → Configuration Loader: loads settings
- Scan Setup → Pipeline Engine: starts pipeline
- Scan Setup → Scan Workspace: creates workspace
- Pipeline Engine → Scope Validation: dispatches stage
- Pipeline Engine → Passive Recon: dispatches stage
- Pipeline Engine → Active Recon: dispatches stage
- Pipeline Engine → Content Discovery: dispatches stage
- Pipeline Engine → JavaScript Recon: dispatches stage
- Pipeline Engine → Parameter Discovery: dispatches stage
- Pipeline Engine → API Enumeration: dispatches stage
- Pipeline Engine → Authentication Mapping: dispatches stage
- Pipeline Engine → Storage Discovery: dispatches stage
- Pipeline Engine → Admin Discovery: dispatches stage
- Pipeline Engine → Cloud Discovery: dispatches stage
- Pipeline Engine → Attack Surface Mapping: dispatches stage
- Pipeline Engine → Security Analysis: dispatches stage
- Pipeline Engine → Summary: dispatches stage
- Pipeline Engine → Scan Workspace: passes workspace
- Passive Recon → DNS Infrastructure: queries records
- Passive Recon → Target Website: probes host
- Active Recon → Target Website: inspects site
- JavaScript Recon → Target Website: renders pages
- Pipeline Engine → Output Merger: merges outputs
- Output Merger → Scan Workspace: reads JSON
- Pipeline Engine → Report Renderer: renders reports
- Report Renderer → Scan Workspace: writes artifacts