• Modules
• Installation
• Quick Start
• Usage
• Performance
• Contributing
• Contributors
• Acknowledgements

sif is built with a modular architecture, allowing for easy extension and customization. Some of our key modules include:

• 📂 Directory/file fuzzing/scanning
• 📡 DNS subdomain enumeration
• 🐾 Common Web scanning
• 🖥️ Port/service scanning
• 🦠 Vulnerability scanning
  • Support for pre-existing nuclei templates
  • Metasploit emulation for execution
• 🔎 Automated Google dorking
• 💘 Shodan integration
• 📦 CMS detection
• 🔍 HTTP Header Analysis
• ☁️ C3 Misconfiguration Scanner
• 🔍 Subdomain Takeover Checks

Visit our Releases page to download the latest pre-built binary for your operating system.

1. Ensure you have Go 1.23 installed on your system.
2. Clone the repository:

   git clone https://github.com/lunchcat/sif.git
   cd sif
   

3. Build using the Makefile:

   make
   

4. The binary will be available in the root directory.

1. Run a basic scan:

   ./sif -u example.com
   

2. For more options and advanced usage, refer to the help command:

   ./sif -h
   

sif offers a wide range of commands and options to customize your pentesting workflow. Here are some common usage examples:

• Directory fuzzing

./sif -u http://example.com -dirlist medium

• Subdomain enumeration

./sif -u http://example.com -dnslist medium

• Supabase/Firebase and C3 Vulnerability scanning

./sif -u https://example.com -js -c3

• Port scanning

./sif -u https://example.com -ports common

For a complete list of commands and options, run ./sif -h.

sif is designed for high performance and efficiency:

• Written in Go for excellent concurrency and speed
• Optimized algorithms for minimal resource usage
• Supports multi-threading for faster scans
• Efficient caching mechanisms to reduce redundant operations

We welcome contributions from the community! Please read our Contributing Guidelines before submitting a pull request.

Areas we're particularly interested in:

• New scanning modules
• Performance improvements
• Documentation enhancements
• Bug fixes and error handling improvements

Thanks to these wonderful people who have contributed to sif:

mel 🚧 🧑‍🏫 📆 🛡️ ⚠️ 💼 💻 🎨 💵 🤔

ProjectDiscovery 📦

macdoos 💻

Matthieu Witrowiez 🤔

tessa 🚇 💬 📓

Eva 📝 🖋 🔬 🛡️ ⚠️ 💻

We'd like to thank the following projects and communities for their inspiration and support:

• ProjectDiscovery for their amazing open-source security tools
• Shodan
• Malcore, for providing us direct API support at Lunchcat.