Update README.md

This commit is contained in:
2026-06-21 17:57:19 +00:00
parent bdaa6aed18
commit e5d9b3ab6c
+7 -2
View File
@@ -8,7 +8,6 @@ REDflare v2 is a scope-first orchestration framework for authorized web applicat
## What v2 adds ## What v2 adds
- A bounded same-origin crawler for links, forms, and execution paths - A bounded same-origin crawler for links, forms, and execution paths
- A deduplicated endpoint inventory shared by all native modules
- Form parameter, HTTP method, content type, and authentication-requirement mapping - Form parameter, HTTP method, content type, and authentication-requirement mapping
- JavaScript route extraction from same-origin script assets - JavaScript route extraction from same-origin script assets
- OpenAPI 2.x and 3.x endpoint and parameter ingestion - OpenAPI 2.x and 3.x endpoint and parameter ingestion
@@ -62,6 +61,9 @@ Launch REDflare with no arguments for the guided interface:
./bin/redflare ./bin/redflare
``` ```
<img width="466" height="230" alt="Screenshot_20260621_093338" src="https://github.com/user-attachments/assets/f247410f-dcba-4674-b825-d23972c4521a" />
The main menu also discovers recent runs and launches the visual investigation The main menu also discovers recent runs and launches the visual investigation
console without requiring command-line flags. Both ordinary paths and local console without requiring command-line flags. Both ordinary paths and local
`file:///...` URLs are accepted. `file:///...` URLs are accepted.
@@ -113,6 +115,8 @@ Open any completed REDflare run as a local, read-only graph workspace:
```bash ```bash
./bin/redflare visualize runs/run_20260620_120000 ./bin/redflare visualize runs/run_20260620_120000
``` ```
<img width="861" height="927" alt="IMG_4927" src="https://github.com/user-attachments/assets/2afdf195-91b2-40d5-86b7-daeae056834c" />
The console binds only to `127.0.0.1`, reads existing run artifacts, and does not The console binds only to `127.0.0.1`, reads existing run artifacts, and does not
send assessment data to a cloud service. It includes: send assessment data to a cloud service. It includes:
@@ -122,7 +126,8 @@ send assessment data to a cloud service. It includes:
- Search across URLs, evidence, parameters, severities, and test IDs - Search across URLs, evidence, parameters, severities, and test IDs
- Per-layer filtering and connected-node highlighting - Per-layer filtering and connected-node highlighting
- Zoom, pan, drag, fit-to-view, and keyboard-accessible node inspection - Zoom, pan, drag, fit-to-view, and keyboard-accessible node inspection
- A grouped evidence panel with collapsible sections, deduplicated/paginated URLs, and copy controls - A grouped evidence panel with collapsible sections, deduplicated/paginated URLs, and copy control
Choose a different loopback port or suppress automatic browser launch: Choose a different loopback port or suppress automatic browser launch: