Contributing

git clone https://github.com/YOUR-USERNAME/scan4all.git
cd scan4all

git remote add upstream https://github.com/GhostTroops/scan4all.git

# Clone the repository
git clone https://github.com/GhostTroops/scan4all.git
cd scan4all

# Build the project
go build

# Run the binary
./scan4all -h

# Download dependencies
go mod download

# Verify dependencies
go mod verify

# Build
go build -v

# Build for Linux
GOOS=linux GOARCH=amd64 go build -o scan4all-linux

# Build for Windows
GOOS=windows GOARCH=amd64 go build -o scan4all.exe

# Build for macOS
GOOS=darwin GOARCH=amd64 go build -o scan4all-mac

# Update your main branch
git checkout main
git pull upstream main

# Create a feature branch
git checkout -b feature/your-feature-name

scan4all/
├── lib/               # Core libraries
│   ├── api/          # API interface
│   └── util/         # Utility functions
├── pkg/              # Packages
│   ├── fingerprint/  # Fingerprint detection
│   └── hydra/        # Password cracking
├── pocs_go/          # Go POCs
├── pocs_yml/         # YAML POCs
├── engine/           # Scan engine
├── brute/            # Brute force modules
└── config/           # Configuration files

# Run tests
go test ./...

# Test specific package
go test ./pkg/fingerprint

# Run with verbose output
go test -v ./...

# Test your changes manually
./scan4all -host http://testsite.com -v

# Add your changes
git add .

# Commit with a descriptive message
git commit -m "feat: add new POC for CVE-2024-XXXXX"

# Push to your fork
git push origin feature/your-feature-name

// Example POC structure
package mypackage

import (
    "fmt"
    "github.com/GhostTroops/scan4all/pkg"
)

// CVE_XXXX_XXXXX checks for [vulnerability description]
func CVE_XXXX_XXXXX(url string) bool {
    req, err := pkg.HttpRequset(
        url+"/vulnerable/path",
        "GET",
        "",
        false,
        nil,
    )
    
    if err != nil {
        return false
    }
    
    if req.StatusCode == 200 {
        pkg.POClog(fmt.Sprintf(
            "Found vuln CVE_XXXX_XXXXX at %s\n",
            url,
        ))
        return true
    }
    
    return false
}

name: poc-yaml-[technology]-[vulnerability]
manual: true
transport: http
rules:
    r0:
        request:
            cache: true
            method: GET
            path: /vulnerable/path
        expression: response.status == 200 && response.body.bcontains(b"vulnerable")
expression: r0()
detail:
    author: your-name
    severity: high|medium|low
    links:
        - https://reference-url.com

package mypackage

import "testing"

func TestCheckVulnerability(t *testing.T) {
    tests := []struct {
        name     string
        url      string
        expected bool
    }{
        {"vulnerable target", "http://vuln.example.com", true},
        {"safe target", "http://safe.example.com", false},
    }
    
    for _, tt := range tests {
        t.Run(tt.name, func(t *testing.T) {
            result := CheckVulnerability(tt.url)
            if result != tt.expected {
                t.Errorf("got %v, want %v", result, tt.expected)
            }
        })
    }
}

# Test against local test environment
./scan4all -host http://localhost:8080 -v

# Test with specific modules
./scan4all -host http://testsite.com -v -debug

# Test POC detection
FingerPrint="Apache Tomcat" ./scan4all -host http://tomcat-test.com

## Description
Brief description of changes

## Type of Change
- [ ] Bug fix
- [ ] New feature
- [ ] Breaking change
- [ ] Documentation update

## Testing
- [ ] Tested locally
- [ ] Added/updated tests
- [ ] All tests passing

## Additional Notes
Any additional information