Update README.md

This commit is contained in:
2026-06-21 17:57:19 +00:00
parent bdaa6aed18
commit e5d9b3ab6c
+8 -3
View File
@@ -8,7 +8,6 @@ REDflare v2 is a scope-first orchestration framework for authorized web applicat
## What v2 adds
- A bounded same-origin crawler for links, forms, and execution paths
- A deduplicated endpoint inventory shared by all native modules
- Form parameter, HTTP method, content type, and authentication-requirement mapping
- JavaScript route extraction from same-origin script assets
- OpenAPI 2.x and 3.x endpoint and parameter ingestion
@@ -62,6 +61,9 @@ Launch REDflare with no arguments for the guided interface:
./bin/redflare
```
<img width="466" height="230" alt="Screenshot_20260621_093338" src="https://github.com/user-attachments/assets/f247410f-dcba-4674-b825-d23972c4521a" />
The main menu also discovers recent runs and launches the visual investigation
console without requiring command-line flags. Both ordinary paths and local
`file:///...` URLs are accepted.
@@ -113,6 +115,8 @@ Open any completed REDflare run as a local, read-only graph workspace:
```bash
./bin/redflare visualize runs/run_20260620_120000
```
<img width="861" height="927" alt="IMG_4927" src="https://github.com/user-attachments/assets/2afdf195-91b2-40d5-86b7-daeae056834c" />
The console binds only to `127.0.0.1`, reads existing run artifacts, and does not
send assessment data to a cloud service. It includes:
@@ -122,7 +126,8 @@ send assessment data to a cloud service. It includes:
- Search across URLs, evidence, parameters, severities, and test IDs
- Per-layer filtering and connected-node highlighting
- Zoom, pan, drag, fit-to-view, and keyboard-accessible node inspection
- A grouped evidence panel with collapsible sections, deduplicated/paginated URLs, and copy controls
- A grouped evidence panel with collapsible sections, deduplicated/paginated URLs, and copy control
Choose a different loopback port or suppress automatic browser launch:
@@ -285,4 +290,4 @@ python3 -m compileall -q redflare tests
## Disclaimer
REDflare is intended solely for authorized security testing, defensive research, and education. Users are responsible for defining and respecting legal scope.
REDflare is intended solely for authorized security testing, defensive research, and education. Users are responsible for defining and respecting legal scope.