How zep4yrs/sitelens works
SiteLens is a vulnerability verification and attack-surface scanning product, delivered through CLI and an embedded web console (with a desktop shell). Its central workflow validates a target, gathers and fingerprints web content, runs verification and enumeration stages, correlates vulnerability intelligence, and returns evidence-backed findings. The README documents the full scan stages; sampled engine source confirms orchestration and hot-swappable per-scan data snapshots, but does not expose every stage call. Edges therefore show documented orchestration without guessing internal wiring.
Main entry points: engine.go Scan orchestrator · server.go HTTP API · main.go CLI commands · app.js Web console
Components 22
User interfaces
- CLI commands
cmd/sitelens/main.go - Web console
web/js/app.js
Scan workflow
- Scan orchestrator
internal/engine/engine.go - Target validation
internal/target/validator.go - Crawl and render
internal/crawler/crawler.go - Technology fingerprinting
internal/sitelens/matcher.go - Verification checks
internal/checks/runner.go - Template funnel
internal/nuclei/nuclei.go
Analysis capabilities
- Passive detection
internal/passive/passive.go - Active probing
internal/dast/dast.go - Asset modules
internal/modules/modules.go - TLS and DNS checks
internal/netsec/netsec.go - Source taint audit
internal/audit/audit.go - Evidence attack chain
internal/chain/chain.go
Knowledge and history
- Vulnerability intelligence
internal/intel/intel.go - Fingerprint rules
internal/sitelens/matcher.go - Scan history and jobs
internal/store/store.go
Results and services
- HTTP API
internal/server/server.go - Findings and evidence
internal/engine/result.go
Other components
- Operator
- Scanned target
- Browser user
Connections 25
- Operator → CLI commands: runs command
- Operator → Web console: submits scan
- Web console → HTTP API: calls API
- CLI commands → Scan orchestrator: runs scan
- CLI commands → HTTP API: starts service
- CLI commands → Source taint audit: runs audit
- HTTP API → Scan orchestrator: schedules scan
- HTTP API → Scan history and jobs: manages jobs
- Scan orchestrator → Target validation: validates target
- Scan orchestrator → Crawl and render: crawls pages
- Scan orchestrator → Technology fingerprinting: identifies technologies
- Scan orchestrator → Verification checks: runs checks
- Scan orchestrator → Template funnel: selects templates
- Scan orchestrator → Passive detection: runs detection
- Scan orchestrator → Active probing: probes parameters
- Scan orchestrator → Asset modules: enumerates assets
- Scan orchestrator → TLS and DNS checks: checks network
- Scan orchestrator → Vulnerability intelligence: correlates findings
- Scan orchestrator → Fingerprint rules: takes snapshot
- Scan orchestrator → Findings and evidence: aggregates results
- Scan orchestrator → Scan history and jobs: persists history
- Scanned target → Target validation: provides target
- Source taint audit → Evidence attack chain: builds evidence chain
- Findings and evidence → HTTP API: serves reports
- HTTP API → Browser user: returns results