Update README.md
This commit is contained in:
@@ -8,7 +8,6 @@ REDflare v2 is a scope-first orchestration framework for authorized web applicat
|
|||||||
## What v2 adds
|
## What v2 adds
|
||||||
|
|
||||||
- A bounded same-origin crawler for links, forms, and execution paths
|
- A bounded same-origin crawler for links, forms, and execution paths
|
||||||
- A deduplicated endpoint inventory shared by all native modules
|
|
||||||
- Form parameter, HTTP method, content type, and authentication-requirement mapping
|
- Form parameter, HTTP method, content type, and authentication-requirement mapping
|
||||||
- JavaScript route extraction from same-origin script assets
|
- JavaScript route extraction from same-origin script assets
|
||||||
- OpenAPI 2.x and 3.x endpoint and parameter ingestion
|
- OpenAPI 2.x and 3.x endpoint and parameter ingestion
|
||||||
@@ -62,6 +61,9 @@ Launch REDflare with no arguments for the guided interface:
|
|||||||
./bin/redflare
|
./bin/redflare
|
||||||
```
|
```
|
||||||
|
|
||||||
|
<img width="466" height="230" alt="Screenshot_20260621_093338" src="https://github.com/user-attachments/assets/f247410f-dcba-4674-b825-d23972c4521a" />
|
||||||
|
|
||||||
|
|
||||||
The main menu also discovers recent runs and launches the visual investigation
|
The main menu also discovers recent runs and launches the visual investigation
|
||||||
console without requiring command-line flags. Both ordinary paths and local
|
console without requiring command-line flags. Both ordinary paths and local
|
||||||
`file:///...` URLs are accepted.
|
`file:///...` URLs are accepted.
|
||||||
@@ -113,6 +115,8 @@ Open any completed REDflare run as a local, read-only graph workspace:
|
|||||||
```bash
|
```bash
|
||||||
./bin/redflare visualize runs/run_20260620_120000
|
./bin/redflare visualize runs/run_20260620_120000
|
||||||
```
|
```
|
||||||
|
<img width="861" height="927" alt="IMG_4927" src="https://github.com/user-attachments/assets/2afdf195-91b2-40d5-86b7-daeae056834c" />
|
||||||
|
|
||||||
|
|
||||||
The console binds only to `127.0.0.1`, reads existing run artifacts, and does not
|
The console binds only to `127.0.0.1`, reads existing run artifacts, and does not
|
||||||
send assessment data to a cloud service. It includes:
|
send assessment data to a cloud service. It includes:
|
||||||
@@ -122,7 +126,8 @@ send assessment data to a cloud service. It includes:
|
|||||||
- Search across URLs, evidence, parameters, severities, and test IDs
|
- Search across URLs, evidence, parameters, severities, and test IDs
|
||||||
- Per-layer filtering and connected-node highlighting
|
- Per-layer filtering and connected-node highlighting
|
||||||
- Zoom, pan, drag, fit-to-view, and keyboard-accessible node inspection
|
- Zoom, pan, drag, fit-to-view, and keyboard-accessible node inspection
|
||||||
- A grouped evidence panel with collapsible sections, deduplicated/paginated URLs, and copy controls
|
- A grouped evidence panel with collapsible sections, deduplicated/paginated URLs, and copy control
|
||||||
|
|
||||||
|
|
||||||
Choose a different loopback port or suppress automatic browser launch:
|
Choose a different loopback port or suppress automatic browser launch:
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user