No critical confirmed issue detected.
"
+
+ payload = {
+ "ips": ips,
+ "domains": domains,
+ "links": links,
+ }
+ payload_json = _safe_json_for_script(payload)
+
+ return f"""
+
+
+ "]
+ for section_title, pairs in sections:
+ parts.append(
+ f"
{html.escape(section_title)}
"
+ )
+ for key, value in pairs:
+ label = html.escape(str(key))
+ rendered = _detail_value_html(str(key), value)
+ parts.append(
+ f"
"
+ )
+ parts.append("
")
+ parts.append("
Issues Found
")
+ parts.append("
")
+ parts.append("
")
+ for level, text in issues:
+ cls = "issue-ok" if level == "ok" else ("issue-warn" if level == "warn" else "issue-bad")
+ parts.append(f"- {html.escape(text)}
")
+ parts.append("
")
+ if verbose_cmd:
+ parts.append(
+ "
"
+ "
Verbose Tip
"
+ "
Use --verbose for deep diagnostics on this subdomain "
+ "(without --recon/--bruteforce): "
+ f"{html.escape(verbose_cmd)}
"
+ "
"
+ )
+ parts.append("
")
+ return "".join(parts)
+
+
+def _cert_label(value: Any) -> str:
+ if value is True:
+ return "valid"
+ if value is False:
+ return "invalid"
+ return "-"
+
+
+def _status_from_issues(row: Dict[str, Any], issues: List[tuple[str, str]]) -> str:
+ has_http = row.get("http_status") is not None
+ has_https = row.get("https_status") is not None
+ if not has_http and not has_https:
+ return "dns-only"
+ for level, _ in issues:
+ if str(level).strip().lower() != "ok":
+ return "warning"
+ return "ok"
+
+
+def _only_ipv4_list(values: List[Any]) -> List[str]:
+ ipv4: List[str] = []
+ for value in values:
+ ip = str(value).strip()
+ if not ip:
+ continue
+ try:
+ parsed = ipaddress.ip_address(ip)
+ except ValueError:
+ continue
+ if parsed.version == 4:
+ ipv4.append(ip)
+ return ipv4
+
+
+def _dns_name_matches(host: str, pattern: str) -> bool:
+ host = host.strip(".").lower()
+ pattern = pattern.strip(".").lower()
+ if not host or not pattern:
+ return False
+ if pattern == host:
+ return True
+ if pattern.startswith("*."):
+ # Wildcard matches exactly one label: *.example.com -> a.example.com
+ suffix = pattern[2:]
+ if not suffix:
+ return False
+ if host == suffix:
+ return False
+ if host.endswith("." + suffix):
+ left = host[: -(len(suffix) + 1)]
+ return "." not in left
+ return False
+
+
+def _hostname_matches_cert(domain: str, cn: Optional[str], sans: Optional[List[str]]) -> Optional[bool]:
+ host = str(domain or "").strip().lower()
+ if not host:
+ return None
+ candidates: List[str] = []
+ if isinstance(cn, str) and cn.strip():
+ candidates.append(cn.strip())
+ if isinstance(sans, list):
+ candidates.extend(str(v).strip() for v in sans if str(v).strip())
+ if not candidates:
+ return None
+ for pattern in candidates:
+ try:
+ if _dns_name_matches(host, pattern):
+ return True
+ except Exception:
+ continue
+ return False
+
+
+def _detail_issues(detail_obj: Dict[str, Any], row: Dict[str, Any]) -> List[tuple[str, str]]:
+ """Aggregate protocol/certificate/security issues for one row.
+
+ The returned list drives both:
+ - `Issues Found` details in expanded row
+ - top-level status badge (`ok`/`warning`/`dns-only`)
+ """
+ http = detail_obj.get("http") or []
+ https = detail_obj.get("https") or []
+ cert = detail_obj.get("cert") or []
+ takeover = detail_obj.get("takeover") or {}
+
+ http_status = http[0] if len(http) > 0 else row.get("http_status")
+ https_status = https[0] if len(https) > 0 else row.get("https_status")
+ http_app_redirect = http[4] if len(http) > 4 else None
+ https_app_redirect = https[4] if len(https) > 4 else None
+
+ cert_valid = cert[0] if len(cert) > 0 else row.get("cert_valid")
+ cert_expiry = cert[1] if len(cert) > 1 else row.get("cert_expiry")
+ cert_cn = cert[2] if len(cert) > 2 else row.get("cert_cn")
+ tls_versions = cert[3] if len(cert) > 3 and cert[3] else row.get("tls_versions")
+ tls_verbose = (detail_obj.get("verbose") or {}).get("tls") or {}
+ cert_sans = tls_verbose.get("san") if isinstance(tls_verbose, dict) else None
+
+ def _as_int(value: Any) -> Optional[int]:
+ try:
+ return int(value) if value is not None else None
+ except Exception:
+ return None
+
+ http_code = _as_int(http_status)
+ https_code = _as_int(https_status)
+ https_ok = https_code is not None and 200 <= https_code < 400
+
+ issues: List[tuple[str, str]] = []
+ seen_msgs: set[str] = set()
+ weak_tls_best: set[str] = set()
+ weak_tls_msg: Optional[str] = None
+
+ def _collect_weak_tls_from_text(text: str) -> set[str]:
+ msg_l = str(text or "").strip().lower()
+ if "weak tls versions detected" not in msg_l:
+ return set()
+ out: set[str] = set()
+ for item in ("TLS 1.0", "TLS 1.1"):
+ if item.lower() in msg_l:
+ out.add(item)
+ if "sslv" in msg_l:
+ # Keep coarse SSLv marker if present in message.
+ out.add("SSLv*")
+ return out
+
+ def _add_issue(level: str, text: str) -> None:
+ msg = str(text).strip()
+ if not msg:
+ return
+ weak_set = _collect_weak_tls_from_text(msg)
+ if weak_set:
+ nonlocal weak_tls_best, weak_tls_msg
+ if weak_set.issubset(weak_tls_best):
+ return
+ weak_tls_best |= weak_set
+ ordered = [v for v in ("SSLv*", "TLS 1.0", "TLS 1.1") if v in weak_tls_best]
+ weak_tls_msg = f"Weak TLS versions detected: {', '.join(ordered)}."
+ # Replace prior weak-tls messages so only the most complete one remains.
+ issues[:] = [(lv, m) for lv, m in issues if "weak tls versions detected" not in m.lower()]
+ seen_msgs_copy = {m for _, m in issues}
+ seen_msgs.clear()
+ seen_msgs.update(seen_msgs_copy)
+ if weak_tls_msg in seen_msgs:
+ return
+ seen_msgs.add(weak_tls_msg)
+ issues.append((level, weak_tls_msg))
+ return
+ if msg in seen_msgs:
+ return
+ seen_msgs.add(msg)
+ issues.append((level, msg))
+
+ if http_code is None and https_code is None:
+ _add_issue("warn", "No HTTP/HTTPS response received. Check DNS, firewall, or timeout.")
+ # Treat common application-level denials/misses as informational (not warning):
+ # - 403: often expected access control
+ # - 404: often expected missing route
+ soft_http_statuses = {403, 404}
+ soft_https_statuses = {403, 404}
+ if http_code is not None and http_code >= 400 and http_code not in soft_http_statuses and https_ok:
+ _add_issue("warn", f"HTTP returned {http_code}, but HTTPS is reachable. Browser may auto-upgrade to HTTPS.")
+ if http_code is not None and http_code >= 400 and http_code not in soft_http_statuses and not https_ok:
+ _add_issue("warn", f"HTTP returned error status {http_code}.")
+ if https_code is not None and https_code >= 400 and https_code not in soft_https_statuses:
+ _add_issue("warn", f"HTTPS returned error status {https_code}.")
+ if http_app_redirect:
+ _add_issue("warn", f"HTTP application-level redirect detected: {http_app_redirect}")
+ if https_app_redirect:
+ _add_issue("warn", f"HTTPS application-level redirect detected: {https_app_redirect}")
+ if https_code is None:
+ _add_issue("warn", "HTTPS endpoint not reachable or not responding.")
+
+ takeover_status = str(takeover.get("status") or "").strip().lower()
+ takeover_provider = str(takeover.get("provider") or "unknown")
+ takeover_cname = str(takeover.get("cname") or "-")
+ if takeover_status == "likely":
+ _add_issue("bad", f"Possible subdomain takeover likely ({takeover_provider}) via CNAME {takeover_cname}.")
+ elif takeover_status == "possible":
+ _add_issue("warn", f"Possible subdomain takeover to verify ({takeover_provider}) via CNAME {takeover_cname}.")
+
+ expiry_expired = False
+ if cert_expiry:
+ try:
+ expiry_expired = date.fromisoformat(str(cert_expiry)) < date.today()
+ except Exception:
+ expiry_expired = False
+
+ weak_tls: List[str] = []
+ if isinstance(tls_versions, list):
+ weak_tls = [v for v in tls_versions if isinstance(v, str) and (v.startswith("SSLv") or v in ("TLS 1.0", "TLS 1.1"))]
+ elif isinstance(tls_versions, str):
+ weak_tls = [v.strip() for v in tls_versions.split(",") if v.strip() in ("TLS 1.0", "TLS 1.1") or v.strip().startswith("SSLv")]
+
+ domain_name = str(row.get("domain") or detail_obj.get("domain") or "").strip().lower()
+ cn_match = _hostname_matches_cert(domain_name, str(cert_cn) if cert_cn else None, cert_sans if isinstance(cert_sans, list) else None)
+ cn_mismatch_probable = cert_valid is False and cn_match is False
+ if cert_valid is False:
+ _add_issue("bad", "Certificate validation failed.")
+ if cn_mismatch_probable and cert_cn:
+ _add_issue("bad", f"Likely hostname mismatch: certificate CN/SAN ({cert_cn}) does not match domain.")
+ elif not expiry_expired and not weak_tls:
+ _add_issue("bad", "Certificate trust/chain verification failed (not an obvious CN mismatch).")
+ if expiry_expired:
+ _add_issue("bad", f"Certificate expired on {cert_expiry}.")
+ if weak_tls:
+ _add_issue("bad", f"Weak TLS versions detected: {', '.join(weak_tls)}.")
+ elif cert_valid is None and https_code is not None:
+ _add_issue("warn", "Certificate check unavailable despite HTTPS response.")
+
+ # Web server version checks (from export row enrichment).
+ for proto in ("http", "https"):
+ status = str(row.get(f"{proto}_server_status") or "").strip().lower()
+ version = row.get(f"{proto}_server_version")
+ latest = row.get(f"{proto}_server_latest")
+ if status == "outdated":
+ _add_issue("bad", f"{proto.upper()} server potentially outdated ({version} < {latest}).")
+ elif status == "advisory":
+ _add_issue("warn", f"{proto.upper()} server version check is advisory; verify patch level at OS/vendor level.")
+
+ # Include all warning/critical findings from verbose security checks when available.
+ verbose = detail_obj.get("verbose") or {}
+ security = verbose.get("security") or {}
+ checks = security.get("checks") or {}
+ if isinstance(checks, dict):
+ for check_name, check in checks.items():
+ if not isinstance(check, dict):
+ continue
+ level = str(check.get("level") or "").strip().lower()
+ summary = str(check.get("summary") or "").strip()
+ if not summary:
+ continue
+ prefix = check_name.replace("_", " ").strip().capitalize()
+ if level in {"warning", "critical"}:
+ _add_issue("warn" if level == "warning" else "bad", f"{prefix}: {summary}")
+
+ # Surface scan-level notes if they describe a problem.
+ # AXFR note handling:
+ # - "allowed" is a real issue (zone transfer exposed)
+ # - failed/refused/denied/closed are informational and should not raise warnings.
+ for note in detail_obj.get("scan_notes") or []:
+ text = str(note).strip()
+ if not text:
+ continue
+ low = text.lower()
+ if "axfr on root domain:" in low:
+ if "allowed" in low:
+ _add_issue("bad", text)
+ continue
+ if any(x in low for x in ("failed", "error", "timeout", "allowed", "warning", "invalid", "outdated")):
+ _add_issue("warn", text)
+
+ # Report only critical and high-confidence findings.
+ critical_issues = [item for item in issues if str(item[0]).strip().lower() == "bad"]
+ if critical_issues:
+ return critical_issues
+ return [("ok", "No critical confirmed issue detected.")]
+
+
+def _finding_evidence_for_issue(issue_text: str, detail_obj: Dict[str, Any], row: Dict[str, Any]) -> str:
+ """Build issue-specific evidence text for findings summary rows."""
+ issue = str(issue_text or "").strip().lower()
+ takeover = detail_obj.get("takeover") or {}
+ takeover_status = str(takeover.get("status") or "").strip().lower()
+ takeover_provider = str(takeover.get("provider") or "-").strip()
+ takeover_cname = str(takeover.get("cname") or "-").strip()
+ matched_fp = takeover.get("matched_fingerprints") or []
+ http = detail_obj.get("http") or []
+ https = detail_obj.get("https") or []
+ cert = detail_obj.get("cert") or []
+ verbose = detail_obj.get("verbose") or {}
+ tls_verbose = verbose.get("tls") if isinstance(verbose, dict) else {}
+ tls_verbose = tls_verbose if isinstance(tls_verbose, dict) else {}
+
+ domain_name = str(row.get("domain") or detail_obj.get("domain") or "-").strip()
+ http_status = http[0] if len(http) > 0 else row.get("http_status")
+ https_status = https[0] if len(https) > 0 else row.get("https_status")
+ http_server = str(http[2] if len(http) > 2 else row.get("http_server") or "-").strip()
+ https_server = str(https[2] if len(https) > 2 else row.get("https_server") or "-").strip()
+ cert_expiry = cert[1] if len(cert) > 1 else row.get("cert_expiry")
+ cert_cn = str(cert[2] if len(cert) > 2 else row.get("cert_cn") or "-").strip()
+ tls_versions = cert[3] if len(cert) > 3 else row.get("tls_versions")
+ san_values = tls_verbose.get("san") or []
+ strict_error = str(tls_verbose.get("strict_error") or "-").strip()
+ issuer = str(tls_verbose.get("issuer") or "-").strip()
+ protocol = str(tls_verbose.get("protocol") or "-").strip()
+ cipher = str(tls_verbose.get("cipher") or "-").strip()
+
+ http_version = row.get("http_server_version")
+ http_latest = row.get("http_server_latest")
+ https_version = row.get("https_server_version")
+ https_latest = row.get("https_server_latest")
+
+ evidence_parts: List[str] = []
+ if "server potentially outdated" in issue:
+ is_https = issue.startswith("https ")
+ if is_https:
+ evidence_parts.append("service=HTTPS")
+ evidence_parts.append(f"banner={https_server}")
+ evidence_parts.append(f"status={https_status if https_status is not None else '-'}")
+ if https_version or https_latest:
+ evidence_parts.append(f"version={https_version or '-'} latest_ref={https_latest or '-'}")
+ else:
+ evidence_parts.append("service=HTTP")
+ evidence_parts.append(f"banner={http_server}")
+ evidence_parts.append(f"status={http_status if http_status is not None else '-'}")
+ if http_version or http_latest:
+ evidence_parts.append(f"version={http_version or '-'} latest_ref={http_latest or '-'}")
+ elif "hostname mismatch" in issue:
+ evidence_parts.append("service=HTTPS/TLS certificate")
+ evidence_parts.append(f"domain={domain_name}")
+ evidence_parts.append(f"cert_cn={cert_cn}")
+ evidence_parts.append(f"https_banner={https_server}")
+ evidence_parts.append(f"issuer={issuer}")
+ if isinstance(san_values, list) and san_values:
+ evidence_parts.append(f"san={', '.join(str(v) for v in san_values[:6])}")
+ elif "certificate validation failed" in issue or "certificate trust/chain verification failed" in issue:
+ evidence_parts.append("service=HTTPS/TLS")
+ evidence_parts.append(f"strict_error={strict_error}")
+ evidence_parts.append(f"issuer={issuer}")
+ elif "certificate expired" in issue:
+ evidence_parts.append("service=HTTPS/TLS")
+ evidence_parts.append(f"cert_expiry={cert_expiry or '-'}")
+ evidence_parts.append(f"issuer={issuer}")
+ elif "weak tls versions detected" in issue:
+ evidence_parts.append("service=HTTPS/TLS")
+ if isinstance(tls_versions, list) and tls_versions:
+ evidence_parts.append(f"tls={', '.join(str(v) for v in tls_versions)}")
+ evidence_parts.append(f"protocol={protocol}")
+ evidence_parts.append(f"cipher={cipher}")
+ elif "subdomain takeover" in issue:
+ evidence_parts.append("service=DNS CNAME + HTTP/HTTPS fingerprint")
+ evidence_parts.append(f"provider={takeover_provider}")
+ evidence_parts.append(f"cname={takeover_cname}")
+ evidence_parts.append(f"takeover_status={takeover_status or '-'}")
+ if matched_fp:
+ evidence_parts.append(f"matched_fp={', '.join(str(v) for v in matched_fp)}")
+ evidence_parts.append(f"http={http_status if http_status is not None else '-'} https={https_status if https_status is not None else '-'}")
+ elif "axfr" in issue or "zone transfer" in issue:
+ evidence_parts.append("service=DNS AXFR")
+ evidence_parts.append(f"note={issue_text}")
+ elif "http returned" in issue or "https returned" in issue or "redirect" in issue:
+ evidence_parts.append("service=HTTP/HTTPS")
+ evidence_parts.append(f"http={http_status if http_status is not None else '-'} https={https_status if https_status is not None else '-'}")
+ evidence_parts.append(f"http_banner={http_server}")
+ evidence_parts.append(f"https_banner={https_server}")
+ else:
+ if http_status is not None or https_status is not None:
+ evidence_parts.append(
+ f"HTTP={http_status if http_status is not None else '-'} HTTPS={https_status if https_status is not None else '-'}"
+ )
+ if takeover_status in {"likely", "possible"}:
+ evidence_parts.append(f"takeover={takeover_status} provider={takeover_provider} cname={takeover_cname}")
+ if cert_expiry:
+ evidence_parts.append(f"cert_expiry={cert_expiry}")
+ if isinstance(tls_versions, list) and tls_versions:
+ evidence_parts.append(f"tls={', '.join(str(v) for v in tls_versions)}")
+ return " | ".join(evidence_parts) if evidence_parts else "-"
+
+
+def _finding_category(issue_text: str) -> str:
+ """Return a category label used to group findings in HTML summary."""
+ text = str(issue_text or "").strip().lower()
+ if not text:
+ return "Security finding"
+ if "takeover" in text:
+ return "Subdomain takeover"
+ if "certificate" in text or "tls" in text or "hostname mismatch" in text:
+ return "TLS / certificate"
+ if "server potentially outdated" in text or "server version" in text:
+ return "Web server version"
+ if "axfr" in text or "zone transfer" in text:
+ return "DNS AXFR exposure"
+ if "http returned" in text or "https returned" in text or "redirect" in text:
+ return "HTTP/HTTPS behavior"
+ if "header" in text:
+ return "Security headers"
+ return "Security finding"
diff --git a/knockpy/version.py b/knockpy/version.py
new file mode 100644
index 0000000..152fc9d
--- /dev/null
+++ b/knockpy/version.py
@@ -0,0 +1,78 @@
+"""Version helpers for knockpy."""
+
+from __future__ import annotations
+
+import re
+from typing import Any, Dict, Tuple
+
+import httpx
+
+__version__ = "9.0.0"
+PYPI_PROJECT = "knock-subdomains"
+PYPI_URL = f"https://pypi.org/pypi/{PYPI_PROJECT}/json"
+
+
+def _version_key(raw: str) -> Tuple[int, ...]:
+ """Convert a version string to a numeric tuple for conservative compare.
+
+ Examples:
+ - "9.0.0" -> (9, 0, 0)
+ - "9.0.0rc1" -> (9, 0, 0, 1)
+ """
+ parts: list[int] = []
+ for token in re.findall(r"\d+", str(raw or "")):
+ try:
+ parts.append(int(token))
+ except Exception:
+ continue
+ return tuple(parts) if parts else (0,)
+
+
+def is_newer_version(latest: str, current: str) -> bool:
+ a = _version_key(latest)
+ b = _version_key(current)
+ width = max(len(a), len(b))
+ return a + (0,) * (width - len(a)) > b + (0,) * (width - len(b))
+
+
+def check_latest_version(current: str = __version__, timeout: float = 2.5) -> Dict[str, Any]:
+ """Check latest published version on PyPI.
+
+ Returns a dict to keep caller logic stable and easy to render:
+ - ok: bool
+ - current: str
+ - latest: Optional[str]
+ - update_available: bool
+ - url: str
+ - error: Optional[str]
+ """
+ result: Dict[str, Any] = {
+ "ok": False,
+ "current": str(current),
+ "latest": None,
+ "update_available": False,
+ "url": PYPI_URL,
+ "error": None,
+ }
+ try:
+ response = httpx.get(
+ PYPI_URL,
+ timeout=timeout,
+ follow_redirects=True,
+ headers={"User-Agent": f"knockpy/{current}"},
+ )
+ if int(response.status_code) >= 400:
+ result["error"] = f"HTTP {response.status_code}"
+ return result
+ payload = response.json()
+ latest = str((payload.get("info") or {}).get("version") or "").strip()
+ if not latest:
+ result["error"] = "Missing version in PyPI response"
+ return result
+ result["ok"] = True
+ result["latest"] = latest
+ result["update_available"] = is_newer_version(latest, str(current))
+ return result
+ except Exception as exc:
+ result["error"] = f"{exc.__class__.__name__}: {exc}"
+ return result
diff --git a/knock/wordlist/wordlist.txt b/knockpy/wordlist/wordlist.txt
similarity index 99%
rename from knock/wordlist/wordlist.txt
rename to knockpy/wordlist/wordlist.txt
index 536d67f..7339bdb 100644
--- a/knock/wordlist/wordlist.txt
+++ b/knockpy/wordlist/wordlist.txt
@@ -139,6 +139,8 @@
98
99
a
+a-dtap
+a.auth-ns
a01
a02
a1
@@ -153,7 +155,6 @@ aaa2
aai
aap
aaron
-a.auth-ns
ab
aba
abacus
@@ -185,9 +186,9 @@ acceptatie
acces
acceso
access
-accessibilita
access1
access2
+accessibilita
accessories
accommodation
account
@@ -208,6 +209,7 @@ acs
act
acta
action
+actions
activate
activation
active
@@ -270,7 +272,6 @@ adserv
adserver
adsl
adt
-a-dtap
adtest
adult
adv
@@ -299,6 +300,8 @@ africa
afrodita
afs
ag
+ag-hinrichs
+ag-kopf-moertz
aga
agate
age
@@ -308,10 +311,8 @@ agenda
agent
agents
agenzia
-ag-hinrichs
agile
agk
-ag-kopf-moertz
agora
agri
agriculture
@@ -342,11 +343,12 @@ aj
ajax
ajuda
ak
+ak-gw
akademia
akademik
akamai
-ak-gw
akira
+aks
al
alabama
aladdin
@@ -492,13 +494,15 @@ ape
apex
aphrodite
api
+api-dev
+api-gw
+api-test
api1
api2
api3
-api-dev
apidev
+apigw
apis
-api-test
apitest
apk
apl
@@ -574,6 +578,7 @@ arena
ares
argentina
argo
+argocd
argon
argos
argus
@@ -711,6 +716,8 @@ australia
austria
aut
auth
+auth-dev
+auth-test
auth1
auth2
author
@@ -765,6 +772,7 @@ azmoon
azs
azure
b
+b.auth-ns
b01
b02
b1
@@ -861,7 +869,6 @@ batch
batman
battle
bau
-b.auth-ns
bayarea
baza
bazaar
@@ -1023,10 +1030,10 @@ blitz
block
blocked
blog
+blog-dev
blog1
blog2
blog3
-blog-dev
blogdev
blogg
blogger
@@ -1175,6 +1182,7 @@ build
buildbot
builder
building
+buildkite
bulgaria
bulk
bulkmail
@@ -1207,6 +1215,7 @@ bydgoszcz
bz
c
c-00
+c.auth-ns
c1
c10
c11
@@ -1348,7 +1357,6 @@ catalyst
catering
cats
cau
-c.auth-ns
cb
cbc
cbf1
@@ -1378,6 +1386,7 @@ ccs
cct
cctv
cd
+cd-dev
cdb
cdburner
cdc
@@ -1468,14 +1477,14 @@ chart
charts
chase
chat
+chat-service
+chat-service2
chat1
chat2
chat3
chat4
chats
chatserver
-chat-service
-chat-service2
che
cheboksary
check
@@ -1521,6 +1530,7 @@ chrysler
chs
church
ci
+ci-dev
cia
cib
cic
@@ -1533,13 +1543,14 @@ cine
cinema
cio
cip
+circleci
cirrus
cis
cisco
-cisco1
-cisco2
cisco-capwap-controller
cisco-lwapp-controller
+cisco1
+cisco2
ciscoworks
cit
citi
@@ -1619,12 +1630,12 @@ cmi
cmp
cmr
cms
+cms-test
cms1
cms2
cms3
cmsadmin
cmsdev
-cms-test
cmstest
cmt
cn
@@ -1725,8 +1736,8 @@ con
concentrator
concord
concorde
-concorso
concorsi
+concorso
concours
concurso
concursos
@@ -1749,6 +1760,7 @@ consola
console
construction
construtor
+consul
consult
consulta
consultant
@@ -1798,6 +1810,7 @@ copy
copyright
coral
core
+core-platform
core0
core01
core1
@@ -2114,6 +2127,10 @@ cz
czat
czech
d
+d-app
+d-click
+d-image
+d-view
d0
d1
d10
@@ -2152,7 +2169,6 @@ daniel
dante
dap
daphne
-d-app
dar
dark
darkorbit
@@ -2216,7 +2232,6 @@ dc3
dcc
dce
dchub
-d-click
dcp
dcs
dd
@@ -2241,6 +2256,7 @@ debian
debug
dec
deco
+decommissioned
dedicated
deep
deepolis
@@ -2321,6 +2337,9 @@ deti
detroit
deutsch
dev
+dev-chat
+dev-chat-service
+dev-www
dev0
dev01
dev02
@@ -2350,8 +2369,6 @@ deva
devadmin
devapi
devblog
-dev-chat
-dev-chat-service
devdb
devel
devel2
@@ -2375,7 +2392,6 @@ devtest
devweb
devwiki
devwowza
-dev-www
devwww
dewey
dex
@@ -2416,7 +2432,6 @@ digital
digitalmedia
dilbert
dima
-d-image
dimdim
dingo
dining
@@ -2456,21 +2471,21 @@ distanza
distanze
distanziati
distanziato
-distribuito
distribuiti
-distributore
-distributori
+distribuito
distributer
distributers
distribution
distributor
+distributore
+distributori
distributors
distribuzione
distribuzioni
+diversi
diversita
diversity
diverso
-diversi
diy
diz
dj
@@ -2499,6 +2514,7 @@ dna
dnews
dnn
dns
+dns-2
dns0
dns01
dns02
@@ -2510,7 +2526,6 @@ dns11
dns12
dns13
dns14
-dns-2
dns2
dns3
dns4
@@ -2526,6 +2541,7 @@ dnstest
do
doc
docker
+docker-registry
docs
doctor
document
@@ -2546,15 +2562,14 @@ dokuwiki
dolphin
dom
domain
+domain-controller
domainadmin
domaincontrol
-domain-controller
domaincontroller
domaincontrolpanel
domaincp
domaindnszones
domainmanagement
-domain
domains
domen
domeny
@@ -2652,7 +2667,6 @@ dummy
dump
dv
dvd
-d-view
dvr
dw
dwb
@@ -2668,6 +2682,12 @@ dynip
dz
dzb
e
+e-com
+e-commerce
+e-learning
+e-mail
+e-resultats
+e-shop
e0
e1
e2
@@ -2716,10 +2736,8 @@ ecm
ecms
eco
ecology
-e-com
ecom
ecomm
-e-commerce
ecommerce
econ
econom
@@ -2800,6 +2818,7 @@ ekaterinburg
ekb
eko
ekonomi
+eks
ektron
el
elab
@@ -2808,7 +2827,6 @@ elara
elastix
elc
elearn
-e-learning
elearning
elearning2
elec
@@ -2839,7 +2857,6 @@ els
elsa
elvis
em
-e-mail
email
email1
email2
@@ -2957,7 +2974,6 @@ era
erasmus
erato
erc
-e-resultats
eric
eris
ernie
@@ -2980,7 +2996,6 @@ eservice
eservices
eset
esf
-e-shop
eshop
eski
esl
@@ -3152,9 +3167,9 @@ fax
fax2
faxserver
fb
+fb-canvas
fbapp
fbapps
-fb-canvas
fbdev
fbe
fbl
@@ -3410,6 +3425,7 @@ fst
ft
ftp
ftp-
+ftp-eu
ftp0
ftp01
ftp02
@@ -3431,7 +3447,6 @@ ftp8
ftp9
ftpadmin
ftpd
-ftp-eu
ftpmini
ftps
ftpsearch
@@ -3452,9 +3467,9 @@ fusion
futbol
future
fw
+fw-1
fw01
fw02
-fw-1
fw1
fw2
fw3
@@ -3596,6 +3611,7 @@ girls
gis
gis2
git
+git-runner
github
gitlab
gitweb
@@ -3608,6 +3624,7 @@ gjc
gjs
gjxy
gk
+gke
gl
gladiator
glass
@@ -3659,6 +3676,7 @@ gps
gpweb
gq
gr
+gr-mbpc1
gra
graal
grace
@@ -3674,6 +3692,7 @@ graphic
graphics
graphics2
graphite
+graphql
graphs
grc
great
@@ -3685,7 +3704,6 @@ greenfox
greetings
grey
grid
-gr-mbpc1
group
groupon
groups
@@ -3797,6 +3815,7 @@ hannibal
hans
hao
happy
+harbor
hardcore
hardware
hardy
@@ -3857,6 +3876,7 @@ hg
hgfgdf
hh
hi
+hi-tech
hidden
hideip
hideip-uk
@@ -3874,7 +3894,6 @@ his
historia
history
hit
-hi-tech
hitech
hive
hj
@@ -4183,6 +4202,7 @@ imc
imchat
imcservices
img
+img-m
img0
img01
img02
@@ -4212,7 +4232,6 @@ imga
imgb
imgc
imgf
-img-m
imgm
imgn
imgs
@@ -4319,6 +4338,7 @@ interior
intern
internacional
internal
+internal-api
international
internet
interno
@@ -4357,6 +4377,11 @@ ios
iota
iowa
ip
+ip-ca
+ip-hk
+ip-uk
+ip-us
+ip-usa
ip1
ip118
ip176-194
@@ -4371,14 +4396,12 @@ ipade
ipam
ipb
ipc
-ip-ca
ipfixe
-ip-hk
iphone
ipkvm
ipl-a
-iplanet
ipl-m
+iplanet
ipm
ipmi
ipmonitor
@@ -4395,9 +4418,6 @@ ipsec-gw
ipsi
ipt
iptv
-ip-uk
-ip-us
-ip-usa
ipv
ipv4
ipv6
@@ -4497,6 +4517,7 @@ jackson
jacksonville
jacob
jade
+jaeger
jaguar
jakarta
jam
@@ -4619,6 +4640,7 @@ k1
k2
k3
k4
+k8s
ka
kabinet
kairos
@@ -4681,6 +4703,7 @@ kernel
kevin
key
keyan
+keycloak
keynote
keys
keyserver
@@ -4763,6 +4786,11 @@ ksp
kt
ku
ku6
+kube
+kube-api
+kube-dashboard
+kubelet
+kubernetes
kuku
kultura
kunde
@@ -4885,6 +4913,7 @@ lee
leeds
leela
legacy
+legacy-old
legal
legend
legion
@@ -5134,6 +5163,8 @@ lyra
lyrics
lyris
m
+m-dev
+m-test
m0
m01
m1
@@ -5190,6 +5221,13 @@ magnolia
mahara
maia
mail
+mail-1
+mail-2
+mail-backup
+mail-gw
+mail-old
+mail-out
+mail-relay
mail0
mail01
mail02
@@ -5198,7 +5236,6 @@ mail04
mail05
mail06
mail07
-mail-1
mail1
mail10
mail11
@@ -5209,7 +5246,6 @@ mail15
mail16
mail17
mail18
-mail-2
mail2
mail20
mail21
@@ -5236,7 +5272,6 @@ maila
mailadmin
mailarchive
mailb
-mail-backup
mailbackup
mailbck
mailbox
@@ -5254,7 +5289,6 @@ mailgate2
mailgate3
mailgateway
mailguard
-mail-gw
mailgw
mailgw1
mailgw2
@@ -5271,12 +5305,9 @@ maillog
mailman
mailmems
mailmx
-mail-old
mailold
-mail-out
mailout
mailout2
-mail-relay
mailrelay
mailroom
mails
@@ -5419,7 +5450,6 @@ md1
mdaemon
mdb
mdc
-m-dev
mdev
mdm
mds
@@ -5430,8 +5460,8 @@ mech
mechatronics
med
media
-media01
media-1
+media01
media1
media2
media3
@@ -5640,6 +5670,7 @@ mobi
mobiel
mobil
mobile
+mobile-test
mobile1
mobile2
mobileapp
@@ -5647,7 +5678,6 @@ mobileapps
mobiledev
mobileiron
mobilemail
-mobile-test
mobiletest
mobility
moc
@@ -5692,11 +5722,11 @@ montreal
moo
mooc
moodle
+moodle-dev
+moodle-test
moodle1
moodle2
-moodle-dev
moodledev
-moodle-test
moodletest
moon
moose
@@ -5756,6 +5786,8 @@ mrtg
mrtg1
mrtg2
ms
+ms-exchange
+ms-sql
ms1
ms2
ms3
@@ -5765,7 +5797,6 @@ msc
msdn
msdnaa
mse
-ms-exchange
msexchange
msg
msi
@@ -5775,7 +5806,6 @@ msn
msoid
msp
mss
-ms-sql
mssql
mssql0
mssql01
@@ -5802,7 +5832,6 @@ mta5
mta6
mtb
mtc
-m-test
mtest
mti
mtm
@@ -5827,8 +5856,8 @@ mus
muse
museum
music
-musica
music-hn
+musica
musik
musique
mustang
@@ -5840,6 +5869,9 @@ mvs
mw
mweb
mx
+mx-1
+mx-a
+mx-b
mx0
mx00
mx01
@@ -5847,7 +5879,6 @@ mx02
mx03
mx04
mx05
-mx-1
mx1
mx10
mx11
@@ -5864,8 +5895,6 @@ mx6
mx7
mx8
mx9
-mx-a
-mx-b
mxbackup
mxs
my
@@ -5948,12 +5977,12 @@ nascosti
nascosto
nashville
nat
+nat-pool
nat1
nat2
nat3
nat4
national
-nat-pool
nats
nature
nauka
@@ -5961,8 +5990,8 @@ nautilus
nav
navi
navigator
-nazionali
nazionale
+nazionali
nb
nba
nc
@@ -6018,6 +6047,7 @@ neuro
nevada
nevis
new
+new-www
new1
new2
new3
@@ -6050,7 +6080,6 @@ newtest
newton
newweb
newwebmail
-new-www
newwww
newyear
newyork
@@ -6171,6 +6200,8 @@ nps
nr
ns
ns-
+ns-1
+ns-2
ns0
ns01
ns02
@@ -6178,7 +6209,6 @@ ns03
ns04
ns05
ns06
-ns-1
ns1
ns10
ns100
@@ -6205,7 +6235,6 @@ ns17
ns18
ns19
ns1a
-ns-2
ns2
ns20
ns201
@@ -6338,6 +6367,7 @@ oas
oascentral
oasis
oauth
+oauth2
ob
obchod
obelix
@@ -6396,6 +6426,7 @@ ohio
oic
oid
oidb
+oidc
oil
ois
oita
@@ -6410,6 +6441,7 @@ ol
ola
olap
old
+old-www
old1
old2
old3
@@ -6423,7 +6455,6 @@ oldman
oldsite
oldweb
oldwebmail
-old-www
oldwww
ole
oleg
@@ -6477,6 +6508,7 @@ openid
openmeetings
opennms
opensource
+opentelemetry
openview
openvpn
openx
@@ -6522,7 +6554,6 @@ orientation
origen
origen-www
origin
-origin2
origin-cdn
origin-images
origin-live
@@ -6530,6 +6561,7 @@ origin-m
origin-staging
origin-user
origin-www
+origin2
orion
orion2
orlando
@@ -6551,6 +6583,7 @@ osx
ot
ota
otc
+otel
other
otp
otrs
@@ -6592,10 +6625,10 @@ owncloud
ows
ox
ox-d
-oxford
ox-i
-oxnard
ox-ui
+oxford
+oxnard
oxygen
oyp
oyun
@@ -7164,6 +7197,9 @@ praxis
prc
prd
pre
+pre-prod
+pre-production
+pre-www
pregnant
prelive
prelive-admin
@@ -7177,9 +7213,7 @@ prenotazioni
prensa
prep
prepaid
-pre-prod
preprod
-pre-production
pres
presence
present
@@ -7195,7 +7229,6 @@ prev
preview
preview1
preview2
-pre-www
prewww
pri
price
@@ -7220,6 +7253,7 @@ prisma
priv
privacy
private
+private-api
prm
pro
proba
@@ -7333,6 +7367,7 @@ pts
pub
pub2
public
+public-api
public1
public2
publica
@@ -7591,10 +7626,10 @@ relay3
relay4
relay5
release
-release0000
release-chat
release-chat-service
release-commondata
+release0000
releasephp
relief
religion
@@ -7756,11 +7791,11 @@ rostov
roundcube
route
router
-router1
-router2
router-b
router-uk
router-us
+router1
+router2
routing
roy
royal
@@ -7810,6 +7845,7 @@ rubin
ruby
rugby
rune
+runner
rural
rus
russia
@@ -7823,6 +7859,8 @@ ryan
ryazan
rz
s
+s-dtap
+s-dtap2
s0
s01
s02
@@ -8133,8 +8171,6 @@ sdm
sdo
sdp
sds
-s-dtap
-s-dtap2
se
sea
seafight
@@ -8210,6 +8246,7 @@ sergio
seri
serial
serv
+serv-refi
serv1
serv2
server
@@ -8291,7 +8328,6 @@ serviziweb
serviziweb1
serviziweb2
serviziweb3
-serv-refi
serwer
serwis
ses
@@ -8502,6 +8538,11 @@ smsgateway
smsgw
smt
smtp
+smtp-gw
+smtp-in
+smtp-out
+smtp-out-01
+smtp-relay
smtp0
smtp01
smtp02
@@ -8527,18 +8568,13 @@ smtp8
smtp9
smtpa
smtpauth
-smtp-gw
smtpgw
smtphost
-smtp-in
smtpin
smtpmail
smtpmax
-smtp-out
smtpout
-smtp-out-01
smtpout2
-smtp-relay
smtprelay
smtps
smtptest
@@ -8623,6 +8659,7 @@ southeast
southwest
sovet
sp
+sp-test
sp1
sp2
spa
@@ -8696,7 +8733,6 @@ sprint
sps
spss
spt
-sp-test
sptest
sputnik
spy
@@ -8805,6 +8841,7 @@ ssh1
ssh2
ssi
ssl
+ssl-vpn
ssl0
ssl01
ssl1
@@ -8812,11 +8849,12 @@ ssl2
ssl3
ssl4
ssltest
-ssl-vpn
sslvpn
ssm
ssmtp
sso
+sso-dev
+sso-test
sso2
ssotest
ssp
@@ -8839,12 +8877,12 @@ stage1
stage2
stages
staging
-staging1
-staging2
-staging40
staging-chat
staging-chat-service
staging-commondata
+staging1
+staging2
+staging40
stagingphp
stalker
stamp
@@ -8866,6 +8904,7 @@ stat
stat1
stat2
static
+static-m
static0
static01
static1
@@ -8876,7 +8915,6 @@ static5
static6
static7
static8
-static-m
statics
station
statistica
@@ -9124,6 +9162,7 @@ szkolenia
sztz
szukaj
t
+t-dtap
t1
t2
t3
@@ -9187,7 +9226,6 @@ tdc
tde
tdm
tds
-t-dtap
te
tea
teach
@@ -9214,6 +9252,7 @@ teens
tehran
teknik
teknobyen-gw2
+tekton
tel
tele
tele2
@@ -9257,6 +9296,8 @@ terry
tes
tesla
test
+test-admin
+test-www
test01
test02
test03
@@ -9285,7 +9326,6 @@ test7
test8
test9
test99
-test-admin
testadmin
testapi
testapp
@@ -9323,7 +9363,6 @@ testvb
testweb
testwiki
testwp
-test-www
testwww
testxp
testy
@@ -9341,12 +9380,12 @@ tftp
tg
tgp
th
+th-core
thai
thailand
thanhtra
thankyou
thc
-th-core
the
theater
theatre
@@ -9847,6 +9886,7 @@ vid1
vid2
vid3
video
+video-m
video1
video2
video3
@@ -9854,7 +9894,6 @@ video4
videochat
videoconf
videoconferencia
-video-m
videos
videos2
videoteca
@@ -9881,9 +9920,9 @@ virgin
virginia
virgo
virt
+virt-gw
virt1
virt2
-virt-gw
virtual
virtual1
virtual2
@@ -10095,6 +10134,7 @@ wds
we
weather
web
+web-dev
web0
web01
web02
@@ -10164,7 +10204,6 @@ webdav
webdb
webdemo
webdesign
-web-dev
webdev
webdev2
webdisk
@@ -10193,6 +10232,7 @@ weblogic
weblogs
webm
webmail
+webmail-old
webmail01
webmail02
webmail1
@@ -10200,7 +10240,6 @@ webmail2
webmail3
webmail4
webmail5
-webmail-old
webmailtest
webmaker
webmakerl
@@ -10458,17 +10497,37 @@ wws
wwu
www
www-
-www0
www-01
-www01
www-02
+www-1
+www-2
+www-3
+www-4
+www-5
+www-a
+www-admin
+www-b
+www-c
+www-cache
+www-dev
+www-devel
+www-int
+www-new
+www-old
+www-org
+www-origin
+www-prod
+www-staging
+www-test
+www-uat
+www0
+www01
www02
www03
www04
www05
www06
www07
-www-1
www1
www10
www11
@@ -10480,7 +10539,6 @@ www16
www17
www18
www19
-www-2
www2
www20
www21
@@ -10492,15 +10550,12 @@ www26
www27
www28
www29
-www-3
www3
www30
www31
-www-4
www4
www40
www42
-www-5
www5
www6
www66
@@ -10508,37 +10563,21 @@ www7
www8
www9
www99
-www-a
wwwa
-www-admin
wwwalt
-www-b
wwwb
-www-c
-www-cache
wwwcache
wwwchat
-www-dev
wwwdev
-www-devel
wwwftp
-www-int
wwwm
wwwmail
-www-new
wwwnew
-www-old
wwwold
-www-org
-www-origin
-www-prod
wwws
-www-staging
wwwstg
wwwt
-www-test
wwwtest
-www-uat
wwww
wwwww
wwwx
@@ -10551,6 +10590,7 @@ wyoming
wyx
wz
x
+x-ray
x1
x2
x3
@@ -10604,7 +10644,6 @@ xms
xp
xpam
xq
-x-ray
xray
xs
xsc
@@ -10678,6 +10717,7 @@ yxy
yy
yz
z
+z-log
z1
z2
z3
@@ -10717,9 +10757,9 @@ zeta
zeus
zf
zh
+zh-cn
zhaopin
zhaosheng
-zh-cn
zhidao
zhuanti
zim
@@ -10729,7 +10769,6 @@ zion
zip
zj
zk
-z-log
zlog
zm
zmail
@@ -10754,4 +10793,4 @@ zy
zyz
zz
zzb
-zzz
+zzz
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 24a1a33..15f142b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,7 +1,5 @@
-requests>=2.32.5
dnspython>=2.8.0
-pyOpenSSL>=25.3.0
-beautifulsoup4>=4.14.2
-tqdm>=4.67.1
httpx[http2]>=0.28.1
-dotenv>=0.9.9
\ No newline at end of file
+pyOpenSSL>=25.3.0
+python-dotenv>=1.0.1
+rich>=13.9.4
diff --git a/setup.py b/setup.py
index 2a9c88f..fab1b13 100644
--- a/setup.py
+++ b/setup.py
@@ -1,4 +1,4 @@
-from setuptools import setup
+from setuptools import find_packages, setup
import os
def load_requirements(path):
@@ -9,19 +9,20 @@ def load_requirements(path):
setup(
name='knock-subdomains',
- version='8.0.0',
+ version='9.0.0',
description='Knockpy Subdomains Scan',
- url='https://github.com/guelfoweb/knock',
+ url='https://github.com/guelfoweb/knockpy',
author='Gianni Amato',
author_email='guelfoweb@gmail.com',
license='GPL-3.0',
- packages=['knock'],
- package_data={"knock": [wordlist, 'report'],},
+ packages=find_packages(include=["knockpy", "knockpy.*"]),
+ package_data={"knockpy": [wordlist]},
include_package_data=True,
install_requires=load_requirements("requirements.txt"),
entry_points={
'console_scripts': [
- 'knockpy=knock.knockpy:main',
+ 'knockpy=knockpy.knockpy:main',
+ 'knockpy.py=knockpy.knockpy:main',
],
}
)
diff --git a/tests/conftest.py b/tests/conftest.py
new file mode 100644
index 0000000..812f61d
--- /dev/null
+++ b/tests/conftest.py
@@ -0,0 +1,9 @@
+from __future__ import annotations
+
+import os
+import sys
+
+
+ROOT = os.path.abspath(os.path.join(os.path.dirname(__file__), ".."))
+if ROOT not in sys.path:
+ sys.path.insert(0, ROOT)
diff --git a/tests/test_cli_helpers.py b/tests/test_cli_helpers.py
new file mode 100644
index 0000000..6d5bd14
--- /dev/null
+++ b/tests/test_cli_helpers.py
@@ -0,0 +1,34 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+from knockpy.cli import _load_domains_from_file, _normalize_domain_input, _normalize_domain_list, _should_save_scan
+
+
+def test_load_domains_from_file_strips_empty_lines(tmp_path: Path):
+ source = tmp_path / "domains.txt"
+ source.write_text("\nexample.com\n\nwww.test.org\n", encoding="utf-8")
+ assert _load_domains_from_file(str(source)) == ["example.com", "www.test.org"]
+
+
+def test_normalize_domain_input_accepts_url_and_plain_domain():
+ assert _normalize_domain_input("https://www.Example.com/path?q=1") == "example.com"
+ assert _normalize_domain_input("sub.example.com") == "sub.example.com"
+ assert _normalize_domain_input("not a domain") is None
+
+
+def test_normalize_domain_list_deduplicates_and_filters_invalid():
+ values = [
+ "https://www.example.com",
+ "example.com",
+ "sub.example.com",
+ "bad domain",
+ "",
+ ]
+ assert _normalize_domain_list(values) == ["example.com", "sub.example.com"]
+
+
+def test_should_save_scan_only_for_recon_or_bruteforce():
+ assert _should_save_scan(recon=False, bruteforce=False) is False
+ assert _should_save_scan(recon=True, bruteforce=False) is True
+ assert _should_save_scan(recon=False, bruteforce=True) is True
diff --git a/tests/test_output_helpers.py b/tests/test_output_helpers.py
new file mode 100644
index 0000000..20b096b
--- /dev/null
+++ b/tests/test_output_helpers.py
@@ -0,0 +1,145 @@
+from datetime import timedelta
+import os
+import sys
+
+sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), "..")))
+
+from knockpy.core import fmt_td
+from knockpy.output import _merge_check_summary, _security_evidence_map, _status_text, _tls_label
+
+
+def test_fmt_td_formats_hhmmss():
+ assert fmt_td(timedelta(hours=1, minutes=2, seconds=3)) == "01:02:03"
+
+
+def test_fmt_td_none():
+ assert fmt_td(None) == "-"
+
+
+def test_tls_label_empty():
+ assert _tls_label(None) == "-"
+ assert _tls_label([]) == "-"
+
+
+def test_tls_label_values():
+ assert _tls_label(["TLS 1.2", "TLS 1.3"]) == "TLS 1.2, TLS 1.3"
+
+
+def test_status_dns_only():
+ assert _status_text([None], [None], [None]) == "dns-only"
+
+
+def test_status_warning_for_http_without_cert():
+ assert _status_text([200], [None], [False]) == "warning"
+
+
+def test_status_ok():
+ assert _status_text([200], [200], [True]) == "ok"
+
+
+def test_security_evidence_map_compacts_key_details():
+ verbose = {
+ "tls": {"strict_ok": False, "strict_error": "CERT_FAIL", "protocol": "TLSv1.3", "cipher": "AES256"},
+ "security": {
+ "mixed_content_count": 2,
+ "server_versions_updated_at": "2026-02-11",
+ "server_assessment": {
+ "banner": "Apache/2.4.49",
+ "product_label": "Apache HTTP Server",
+ "version": "2.4.49",
+ "latest": "2.4.62",
+ },
+ "methods": {
+ "http": {"allow": ["GET", "HEAD"]},
+ "https": {"allow": ["GET", "HEAD", "OPTIONS"]},
+ "risky_methods": [],
+ "inferred_safe": [],
+ },
+ },
+ }
+ evidence = _security_evidence_map(verbose)
+ assert "mixed_content" in evidence
+ assert evidence["mixed_content"][0] == "refs=2"
+ assert "server_version" in evidence
+ assert any("detected=2.4.49 latest=2.4.62" in part for part in evidence["server_version"])
+ assert "methods" in evidence
+ assert evidence["methods"][0] == "Supported Methods: GET HEAD OPTIONS"
+
+
+def test_merge_check_summary_limits_details_by_level():
+ evidence_map = {"headers": ["a=1", "b=2", "c=3", "d=4"]}
+ warning_item = {"level": "warning", "summary": "Header issues"}
+ info_item = {"level": "info", "summary": "Header baseline"}
+ assert _merge_check_summary("headers", warning_item, evidence_map) == "Header issues | a=1 | b=2 | c=3"
+ assert _merge_check_summary("headers", info_item, evidence_map) == "Header baseline | a=1"
+
+
+def test_merge_check_summary_methods_keeps_enabled_and_risky():
+ evidence_map = {"methods": ["Supported Methods: GET HEAD OPTIONS", "risky=-", "x=ignored"]}
+ item = {"level": "ok", "summary": "No risky HTTP methods exposed"}
+ assert (
+ _merge_check_summary("methods", item, evidence_map)
+ == "No risky HTTP methods exposed | Supported Methods: GET HEAD OPTIONS | risky=-"
+ )
+
+
+def test_security_evidence_map_methods_flags_dangerous():
+ verbose = {
+ "security": {
+ "methods": {
+ "http": {"allow": ["GET", "TRACE"]},
+ "https": {"allow": ["POST", "DELETE"]},
+ "risky_methods": ["DELETE", "TRACE"],
+ "inferred_safe": [],
+ },
+ }
+ }
+ evidence = _security_evidence_map(verbose)
+ assert evidence["methods"][0] == "Supported Methods: GET POST DELETE TRACE"
+ assert evidence["methods"][1] == "[red]dangerous=DELETE, TRACE[/red]"
+
+
+def test_security_evidence_map_methods_unknown_without_allow():
+ verbose = {
+ "security": {
+ "methods": {
+ "http": {"status": 405, "allow": []},
+ "https": {"status": 405, "allow": []},
+ "risky_methods": [],
+ "inferred_safe": [],
+ },
+ }
+ }
+ evidence = _security_evidence_map(verbose)
+ assert evidence["methods"][0] == "Supported Methods: unknown (server does not disclose Allow/CORS methods)"
+ assert evidence["methods"][1] == "probe_status=http:405 https:405"
+
+
+def test_security_evidence_map_methods_from_cors_allow():
+ verbose = {
+ "security": {
+ "methods": {
+ "http": {"status": 200, "allow": [], "cors_allow": ["GET", "HEAD", "POST", "OPTIONS"]},
+ "https": {"status": 200, "allow": [], "cors_allow": []},
+ "risky_methods": [],
+ "inferred_safe": [],
+ },
+ }
+ }
+ evidence = _security_evidence_map(verbose)
+ assert evidence["methods"][0] == "Supported Methods: GET HEAD POST OPTIONS"
+
+
+def test_security_evidence_map_methods_from_inferred_probe():
+ verbose = {
+ "security": {
+ "methods": {
+ "http": {"status": 200, "allow": [], "cors_allow": []},
+ "https": {"status": 200, "allow": [], "cors_allow": []},
+ "risky_methods": [],
+ "inferred_safe": ["GET", "HEAD", "POST", "OPTIONS"],
+ },
+ }
+ }
+ evidence = _security_evidence_map(verbose)
+ assert evidence["methods"][0] == "Supported Methods: GET HEAD POST OPTIONS"
diff --git a/tests/test_runtime_helpers.py b/tests/test_runtime_helpers.py
new file mode 100644
index 0000000..0c99ca2
--- /dev/null
+++ b/tests/test_runtime_helpers.py
@@ -0,0 +1,26 @@
+from __future__ import annotations
+
+from datetime import timedelta
+
+import knockpy.engine.runtime as runtime
+
+
+def test_pick_user_agent_respects_explicit_value():
+ assert runtime.pick_user_agent("MyAgent/1.0") == "MyAgent/1.0"
+
+
+def test_pick_user_agent_random_uses_pool(monkeypatch):
+ monkeypatch.setattr(runtime.random, "choice", lambda items: items[0])
+ assert runtime.pick_user_agent("random") == runtime.USER_AGENTS[0]
+ assert runtime.pick_user_agent(None) == runtime.USER_AGENTS[0]
+
+
+def test_www_fallback_domain_only_when_needed():
+ assert runtime._www_fallback_domain("example.com") == "www.example.com"
+ assert runtime._www_fallback_domain("www.example.com") is None
+ assert runtime._www_fallback_domain("not a domain") is None
+
+
+def test_fmt_td_expected_format():
+ assert runtime.fmt_td(timedelta(hours=2, minutes=3, seconds=4)) == "02:03:04"
+ assert runtime.fmt_td(None) == "-"
diff --git a/tests/test_storage_api.py b/tests/test_storage_api.py
new file mode 100644
index 0000000..d43bf23
--- /dev/null
+++ b/tests/test_storage_api.py
@@ -0,0 +1,98 @@
+from __future__ import annotations
+
+from datetime import timedelta
+from pathlib import Path
+
+from knockpy.storage import (
+ count_reports,
+ delete_report,
+ get_report,
+ get_setting,
+ get_settings,
+ init_db,
+ list_reports,
+ reset_reports,
+ save_scan,
+ set_setting,
+)
+
+
+def test_storage_scan_lifecycle_roundtrip(tmp_path: Path):
+ db_path = tmp_path / "reports.db"
+ init_db(db_path)
+ assert db_path.exists()
+
+ report_id = save_scan(
+ target="example.com",
+ mode="domain",
+ settings={"timeout": 3.0, "threads": 50},
+ results={"domain": "example.com", "ip": ["93.184.216.34"]},
+ elapsed=timedelta(seconds=4),
+ db_path=db_path,
+ )
+ assert report_id > 0
+ assert count_reports(db_path) == 1
+
+ reports = list_reports(limit=10, db_path=db_path)
+ assert len(reports) == 1
+ assert reports[0]["id"] == report_id
+ assert reports[0]["target"] == "example.com"
+
+ by_latest = get_report("latest", db_path=db_path)
+ assert by_latest is not None
+ assert by_latest["id"] == report_id
+ assert by_latest["target"] == "example.com"
+ assert by_latest["mode"] == "domain"
+ assert isinstance(by_latest["results"], list)
+ assert by_latest["results"][0]["domain"] == "example.com"
+
+ by_id = get_report(str(report_id), db_path=db_path)
+ assert by_id is not None
+ assert by_id["id"] == report_id
+
+ by_target = get_report("example.com", db_path=db_path)
+ assert by_target is not None
+ assert by_target["id"] == report_id
+
+ assert delete_report(report_id, db_path=db_path) is True
+ assert count_reports(db_path) == 0
+ assert delete_report(report_id, db_path=db_path) is False
+
+
+def test_storage_settings_roundtrip(tmp_path: Path):
+ db_path = tmp_path / "reports.db"
+ init_db(db_path)
+
+ set_setting("runtime.timeout", "4", db_path=db_path)
+ set_setting("runtime.threads", "120", db_path=db_path)
+ set_setting("api.shodan", None, db_path=db_path)
+
+ assert get_setting("runtime.timeout", db_path=db_path) == "4"
+ assert get_setting("runtime.threads", db_path=db_path) == "120"
+ assert get_setting("api.shodan", db_path=db_path) is None
+ assert get_setting("missing", db_path=db_path) is None
+
+ all_settings = get_settings(db_path=db_path)
+ assert all_settings["runtime.timeout"] == "4"
+ assert all_settings["runtime.threads"] == "120"
+ assert "api.shodan" in all_settings
+
+ runtime_only = get_settings(prefix="runtime.", db_path=db_path)
+ assert sorted(runtime_only.keys()) == ["runtime.threads", "runtime.timeout"]
+
+
+def test_storage_reset_reports_returns_deleted_count(tmp_path: Path):
+ db_path = tmp_path / "reports.db"
+ init_db(db_path)
+ for idx in range(3):
+ save_scan(
+ target=f"example-{idx}.com",
+ mode="domain",
+ settings={},
+ results=[],
+ elapsed=None,
+ db_path=db_path,
+ )
+ assert count_reports(db_path) == 3
+ assert reset_reports(db_path) == 3
+ assert count_reports(db_path) == 0
diff --git a/tests/test_version_helpers.py b/tests/test_version_helpers.py
new file mode 100644
index 0000000..7b44eb8
--- /dev/null
+++ b/tests/test_version_helpers.py
@@ -0,0 +1,64 @@
+from __future__ import annotations
+
+import knockpy.version as version
+
+
+class _DummyResponse:
+ def __init__(self, status_code: int, payload):
+ self.status_code = status_code
+ self._payload = payload
+
+ def json(self):
+ return self._payload
+
+
+def test_version_key_and_compare():
+ assert version._version_key("9.0.0") == (9, 0, 0)
+ assert version._version_key("9.0.0rc1") == (9, 0, 0, 1)
+ assert version.is_newer_version("9.1.0", "9.0.9") is True
+ assert version.is_newer_version("9.0.0", "9.0.0") is False
+ assert version.is_newer_version("9.0", "9.0.0") is False
+
+
+def test_check_latest_version_update_available(monkeypatch):
+ monkeypatch.setattr(
+ version.httpx,
+ "get",
+ lambda *args, **kwargs: _DummyResponse(200, {"info": {"version": "9.1.0"}}),
+ )
+ info = version.check_latest_version(current="9.0.0")
+ assert info["ok"] is True
+ assert info["latest"] == "9.1.0"
+ assert info["update_available"] is True
+
+
+def test_check_latest_version_no_update(monkeypatch):
+ monkeypatch.setattr(
+ version.httpx,
+ "get",
+ lambda *args, **kwargs: _DummyResponse(200, {"info": {"version": "9.0.0"}}),
+ )
+ info = version.check_latest_version(current="9.0.0")
+ assert info["ok"] is True
+ assert info["update_available"] is False
+
+
+def test_check_latest_version_handles_http_error(monkeypatch):
+ monkeypatch.setattr(
+ version.httpx,
+ "get",
+ lambda *args, **kwargs: _DummyResponse(503, {"info": {"version": "9.1.0"}}),
+ )
+ info = version.check_latest_version(current="9.0.0")
+ assert info["ok"] is False
+ assert "HTTP 503" in str(info["error"])
+
+
+def test_check_latest_version_handles_exception(monkeypatch):
+ def _boom(*args, **kwargs):
+ raise RuntimeError("network down")
+
+ monkeypatch.setattr(version.httpx, "get", _boom)
+ info = version.check_latest_version(current="9.0.0")
+ assert info["ok"] is False
+ assert "RuntimeError" in str(info["error"])