SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
This report summarizes scanner evidence for smicallef/spiderfoot, a Python project with 23,315 GitHub stars. SynthScan examined 98,643 lines of code across 764 source files, recording 1479 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 26.8 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 658 finding(s).
Are imports declared and package/API names verified? 8 finding(s).
Are wrappers, guards, and repeated structures necessary? 987 finding(s).
Which changes need focused human review? 1479 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1479 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sf.py | 3 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | sf.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | sflib.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | sflib.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | sfwebui.py | 2 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM | sfwebui.py | 11 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM | sfcli.py | 3 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | sfcli.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | sfscan.py | 2 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM | sfscan.py | 11 | # ----------------------------------------------------------------- | COMMENT |
| MEDIUM | spiderfoot/db.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | spiderfoot/db.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_opennic.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_opennic.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_commoncrawl.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_commoncrawl.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_citadel.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_citadel.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_dnsraw.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_dnsraw.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_cinsscore.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_cinsscore.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_myspace.py | 1 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_myspace.py | 10 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_tool_onesixtyone.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_tool_onesixtyone.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_junkfiles.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_junkfiles.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_cloudflaredns.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_cloudflaredns.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_surbl.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_surbl.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_urlscan.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_urlscan.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_archiveorg.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_archiveorg.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_bitcoinwhoswho.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_bitcoinwhoswho.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_greynoise_community.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_greynoise_community.py | 13 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_fullhunt.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_fullhunt.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_apple_itunes.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_apple_itunes.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_bitcoinabuse.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_bitcoinabuse.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_isc.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_isc.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_accounts.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_accounts.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_openphish.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_openphish.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_tool_retirejs.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_tool_retirejs.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_spyonweb.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_spyonweb.py | 12 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_hackertarget.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_hackertarget.py | 13 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_securitytrails.py | 2 | # ------------------------------------------------------------------------------- | COMMENT |
| MEDIUM | modules/sfp_securitytrails.py | 11 | # ------------------------------------------------------------------------------- | COMMENT |
| 418 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sf.py | 165 | except Exception as e: | CODE |
| LOW | sf.py | 177 | except Exception as e: | CODE |
| LOW | sf.py | 194 | except Exception as e: | CODE |
| LOW | sflib.py | 165 | except Exception as e: | CODE |
| LOW | sflib.py | 1238 | except Exception: | CODE |
| LOW | sflib.py | 1287 | except Exception as e: | CODE |
| LOW | sflib.py | 1331 | except Exception as e: | CODE |
| LOW | sflib.py | 1372 | except Exception as e: | CODE |
| LOW | sflib.py | 1397 | except Exception as e: | CODE |
| LOW | sflib.py | 1429 | except Exception as e: | CODE |
| LOW | sflib.py | 1526 | except Exception: | CODE |
| LOW | sflib.py | 1531 | except Exception: | CODE |
| LOW | sfwebui.py | 265 | except Exception: | CODE |
| LOW | sfwebui.py | 346 | except Exception: | CODE |
| LOW | sfwebui.py | 386 | except Exception: | CODE |
| LOW | sfwebui.py | 391 | except Exception: | CODE |
| LOW | sfwebui.py | 843 | except Exception as e: | CODE |
| LOW | sfwebui.py | 897 | except Exception as e: | CODE |
| LOW | sfwebui.py | 1125 | except Exception as e: | CODE |
| LOW | sfwebui.py | 1149 | except Exception as e: | CODE |
| LOW | sfwebui.py | 1191 | except Exception as e: | CODE |
| LOW | sfwebui.py | 1206 | except Exception: | CODE |
| LOW | sfwebui.py | 1232 | except Exception: | CODE |
| LOW | sfwebui.py | 1371 | except Exception as e: | CODE |
| LOW | sfwebui.py | 1491 | except Exception as e: | CODE |
| LOW | sfwebui.py | 1553 | except Exception as e: | CODE |
| LOW | sfwebui.py | 1579 | except Exception: | CODE |
| LOW | sfwebui.py | 1605 | except Exception: | CODE |
| LOW | sfwebui.py | 1704 | except Exception: | CODE |
| LOW | sfwebui.py | 1709 | except Exception: | CODE |
| LOW | sfwebui.py | 1737 | except Exception: | CODE |
| LOW | sfwebui.py | 1768 | except Exception: | CODE |
| LOW | sfwebui.py | 1807 | except Exception: | CODE |
| LOW | sfwebui.py | 1831 | except Exception: | CODE |
| LOW | sfwebui.py | 1852 | except Exception: | CODE |
| LOW | sfwebui.py | 1876 | except Exception: | CODE |
| LOW | sfcli.py | 416 | except Exception as e: | CODE |
| MEDIUM | sfcli.py | 417 | self.edprint(f"Error parsing command: {e}") | CODE |
| MEDIUM | sfcli.py | 550 | self.edprint(f"Error running your query: {j[1]}") | CODE |
| LOW | sfcli.py | 850 | except Exception as e: | CODE |
| MEDIUM | sfcli.py | 1223 | self.edprint("Error fetching SpiderFoot server-side config.") | CODE |
| MEDIUM | sfcli.py | 1314 | self.edprint(f"Error setting SpiderFoot server-side config: {j[1]}") | CODE |
| LOW | sfscan.py | 296 | except Exception: | CODE |
| LOW⚡ | sfscan.py | 313 | except Exception: | CODE |
| LOW⚡ | sfscan.py | 322 | except Exception as e: | CODE |
| LOW⚡ | sfscan.py | 330 | except Exception as e: | CODE |
| LOW⚡ | sfscan.py | 339 | except Exception as e: | CODE |
| LOW⚡ | sfscan.py | 346 | except Exception as e: | CODE |
| LOW⚡ | sfscan.py | 354 | except Exception as e: | CODE |
| LOW⚡ | sfscan.py | 534 | except Exception: | CODE |
| LOW⚡ | sfscan.py | 544 | except Exception: | CODE |
| LOW⚡ | sfscan.py | 553 | except Exception: | CODE |
| LOW | spiderfoot/db.py | 319 | except Exception as e: | CODE |
| LOW | spiderfoot/db.py | 345 | except Exception: | CODE |
| LOW | spiderfoot/db.py | 359 | except Exception as e: | CODE |
| LOW | spiderfoot/db.py | 390 | except Exception: | CODE |
| LOW | spiderfoot/threadpool.py | 257 | except Exception: # noqa: B902 | CODE |
| LOW | spiderfoot/plugin.py | 389 | except Exception as e: | CODE |
| LOW | spiderfoot/plugin.py | 524 | except Exception as e: | CODE |
| MEDIUM | spiderfoot/plugin.py | 498 | def threadWorker(self) -> None: | CODE |
| 267 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sf.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | sflib.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | sfwebui.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | docker-compose.yml | 1 | version: "3" | COMMENT |
| LOW | sfcli.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | sfscan.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | spiderfoot/db.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | spiderfoot/plugin.py | 101 | # Current event being processed | COMMENT |
| LOW | spiderfoot/plugin.py | 341 | COMMENT | |
| LOW | spiderfoot/static/js/spiderfoot.js | 1 | //------------------------------------------------------------------------------- | COMMENT |
| LOW | docs/conf.py | 1 | # Configuration file for the Sphinx documentation builder. | COMMENT |
| LOW | docs/conf.py | 41 | # for a list of supported languages. | COMMENT |
| LOW | modules/sfp_opennic.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_commoncrawl.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_citadel.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_dnsraw.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_cinsscore.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_tool_onesixtyone.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_junkfiles.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_cloudflaredns.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_surbl.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_urlscan.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_archiveorg.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_bitcoinwhoswho.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_greynoise_community.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_fullhunt.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_apple_itunes.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_bitcoinabuse.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_isc.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_accounts.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_openphish.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_tool_retirejs.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_spyonweb.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_hackertarget.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_securitytrails.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_dnsneighbor.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_threatcrowd.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_bingsearch.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_dnsbrute.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_sociallinks.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_robtex.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_hosting.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_trumail.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_openstreetmap.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_company.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_dnszonexfer.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_cleantalk.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_uceprotect.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_textmagic.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_emailrep.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_tool_testsslsh.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_cleanbrowsing.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_coinblocker.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_zoneh.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_whatcms.py | 1 | # ------------------------------------------------------------------------------- | COMMENT |
| LOW | modules/sfp_c99.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_pulsedive.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_abstractapi.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_alienvaultiprep.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| LOW | modules/sfp_crt.py | 1 | # -*- coding: utf-8 -*- | COMMENT |
| 179 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sflib.py | 307 | Convert a Python dictionary to something storable in the database. Args: opts (dict): Dictionary of | STRING |
| HIGH | sflib.py | 371 | Take strings, etc. from the database or UI and convert them to a dictionary for Python to process. Args | STRING |
| HIGH | sfwebui.py | 194 | Convert data to HTML entities; except quotes and ampersands. Args: inputList (list): list of string | STRING |
| HIGH | sfwebui.py | 796 | Rerun a scan. Args: id (str): scan ID Returns: None Raises: | STRING |
| HIGH | sfwebui.py | 1089 | Save settings, also used to completely reset them to default. Args: allopts: TBD token | STRING |
| HIGH | sfwebui.py | 1376 | Initiate a scan. Args: scanname (str): scan name scantarget (str): scan target | STRING |
| HIGH | spiderfoot/db.py | 449 | Search database. Args: criteria (dict): search criteria such as: - scan_id (search | STRING |
| HIGH | spiderfoot/db.py | 550 | Logs a batch of events to the database. Args: batch (list): tuples containing: instanceId, classifi | STRING |
| HIGH | spiderfoot/db.py | 720 | Return info about a scan instance (name, target, created, started, ended, status) Args: instanceId | STRING |
| HIGH | spiderfoot/db.py | 749 | Obtain a summary of the results, filtered by event type, module or entity. Args: instanceId (str): | STRING |
| HIGH | spiderfoot/db.py | 803 | Obtain a summary of the correlations, filtered by rule or risk Args: instanceId (str): scan instanc | STRING |
| HIGH | spiderfoot/db.py | 848 | Obtain a list of the correlations from a scan Args: instanceId (str): scan instance ID Ret | STRING |
| HIGH | spiderfoot/db.py | 889 | Obtain the data for a scan and event type. Args: instanceId (str): scan instance ID eve | STRING |
| HIGH | spiderfoot/db.py | 978 | Obtain a unique list of elements. Args: instanceId (str): scan instance ID eventType (s | STRING |
| HIGH | spiderfoot/db.py | 1020 | Get scan logs. Args: instanceId (str): scan instance ID limit (int): limit number of re | STRING |
| HIGH | spiderfoot/db.py | 1066 | Get scan errors. Args: instanceId (str): scan instance ID limit (int): limit number of | STRING |
| HIGH | spiderfoot/db.py | 1103 | Delete a scan instance. Args: instanceId (str): scan instance ID Returns: bool | STRING |
| HIGH | spiderfoot/db.py | 1138 | Set the false positive flag for a result. Args: instanceId (str): scan instance ID resu | STRING |
| HIGH | spiderfoot/db.py | 1177 | Store the default configuration in the database. Args: optMap (dict): config options Retur | STRING |
| HIGH | spiderfoot/db.py | 1306 | Retrieve configuration data for a scan component. Args: instanceId (str): scan instance ID | STRING |
| HIGH | spiderfoot/db.py | 1470 | History of data from the scan. Args: instanceId (str): scan instance ID Returns: | STRING |
| HIGH | spiderfoot/db.py | 1499 | Get the source IDs, types and data for a set of IDs. Args: instanceId (str): scan instance ID | STRING |
| HIGH | spiderfoot/db.py | 1550 | Get the child IDs, types and data for a set of IDs. Args: instanceId (str): scan instance ID | STRING |
| HIGH | spiderfoot/db.py | 1599 | Get the full set of upstream IDs which are parents to the supplied set of IDs. Args: instanceId (st | STRING |
| HIGH | spiderfoot/db.py | 1670 | Get the full set of downstream IDs which are children of the supplied set of IDs. Args: instanceId | STRING |
| HIGH | spiderfoot/db.py | 1728 | Create a correlation result in the database. Args: instanceId (str): scan instance ID r | STRING |
| HIGH | spiderfoot/correlation.py | 134 | Build up the criteria to be used to query the database. Args: matchrule (dict): dict representing a | STRING |
| HIGH | spiderfoot/correlation.py | 843 | Work through all the components of the rule to produce a final set of data elements for building into correlatio | STRING |
| HIGH | spiderfoot/correlation.py | 898 | Build the correlation title with field substitution. Args: rule (dict): correlation rule | STRING |
| HIGH | spiderfoot/helpers.py | 122 | Load modules from modules directory. Args: path (str): file system path for modules directory | STRING |
| HIGH | spiderfoot/helpers.py | 176 | Load correlation rules from correlations directory. Args: path (str): file system path for correlat | STRING |
| HIGH | spiderfoot/helpers.py | 345 | Return dictionary words from several language dictionaries. Args: wordlists (list[str]): list of wo | STRING |
| HIGH | spiderfoot/helpers.py | 373 | Return list of human names from wordlist file. Args: wordlists (list[str]): list of wordlist file n | STRING |
| HIGH | spiderfoot/helpers.py | 401 | Return list of usernames from wordlist file. Args: wordlists (list[str]): list of wordlist file nam | STRING |
| HIGH | spiderfoot/helpers.py | 560 | Return a format-agnostic collection of tuples to use as the basis for building graphs in various formats. | STRING |
| HIGH | spiderfoot/helpers.py | 637 | Converts a dictionary of k -> array to a nested tree that can be digested by d3 for visualizations. Arg | STRING |
| HIGH | spiderfoot/helpers.py | 775 | Find all URLs within the supplied content. This function does not fetch any URLs. A dictionary will be | STRING |
| HIGH | spiderfoot/helpers.py | 1144 | Given a certificate as a DER-encoded blob of bytes, returns a PEM-encoded string version of the same certificate. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sfwebui.py | 491 | def scaneventresultexportmulti(self: 'SpiderFootWebUi', ids: str, filetype: str = "csv", dialect: str = "excel") -> | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 217 | def test_scan_viz_multi_should_return_a_string(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 227 | def test_scanopts_should_return_dict(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 235 | def test_rerunscan_invalid_scan_id_should_return_error(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 378 | def test_eventtypes_should_return_list(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 385 | def test_modules_should_return_list(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 392 | def test_correlationrules_should_return_list(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 399 | def test_ping_should_return_list(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 545 | def test_scanlist_should_return_a_list(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 555 | def test_scanstatus_should_return_a_list(self): | CODE |
| LOW⚡ | test/unit/test_spiderfootwebui.py | 565 | def test_scansummary_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 24 | def test_init_no_web_config_should_raise(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 76 | def test_clean_user_input_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 83 | def test_clean_user_input_invalid_input_should_raise(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 94 | def test_clean_user_input_should_clean_user_input(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 109 | def test_search_base_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 123 | def test_scan_correlations_export(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 134 | def test_scan_event_result_export_should_return_bytes(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 147 | def test_scan_event_result_export_multi(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 160 | def test_scan_search_result_export(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 172 | def test_scan_export_logs_invalid_scan_id_should_return_string(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 184 | def test_scan_export_logs_should_return_bytes(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 195 | def test_scan_export_json_multi(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 206 | def test_scan_viz_should_return_a_string(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 300 | def test_optsexport_should_return_a_string(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 307 | def test_optsraw_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 325 | def test_scandelete_invalid_scanid_should_return_an_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 336 | def test_savesettings_invalid_csrf_token_should_return_an_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 351 | def test_savesettingsraw_invalid_csrf_token_should_return_an_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 363 | def test_reset_settings_should_return_true(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 410 | def test_query_should_perform_sql_query(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 424 | def test_query_invalid_query_should_return_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 441 | def test_start_scan_should_start_a_scan(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 452 | def test_start_scan_invalid_scanname_should_return_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 464 | def test_start_scan_invalid_scantarget_should_return_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 476 | def test_start_scan_unrecognized_scantarget_type_should_return_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 486 | def test_start_scan_invalid_modules_should_return_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 498 | def test_start_scan_invalid_typelist_should_return_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 510 | def test_stopscan_invalid_scanid_should_return_an_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 521 | def test_scanlog_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 533 | def test_scanerrors_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 577 | def test_scaneventresults_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 589 | def test_scaneventresultsunique_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 601 | def test_search_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 613 | def test_scan_history_missing_scanid_should_return_error(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 627 | def test_scan_history_should_return_a_list(self): | CODE |
| LOW | test/unit/test_spiderfootwebui.py | 637 | def test_scan_element_type_discovery_should_return_a_dict(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 139 | def test_config_serialize_invalid_opts_should_raise(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 145 | def test_config_serialize_should_return_a_dict(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 151 | def test_config_unserialize_invalid_opts_should_raise(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 157 | def test_config_unserialize_invalid_reference_point_should_raise(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 163 | def test_config_unserialize_should_return_a_dict(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 169 | def test_cache_get_invalid_label_should_return_none(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 175 | def test_cache_get_invalid_timeout_should_return_none(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 313 | def test_host_domain_invalid_tldlist_should_return_none(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 319 | def test_is_domain_valid_domain_should_return_true(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 327 | def test_is_domain_invalid_domain_should_return_false(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 346 | def test_is_domain_invalid_tldlist_should_return_false(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 353 | def test_is_domain_invalid_tld_should_return_false(self): | CODE |
| LOW⚡ | test/unit/test_spiderfoot.py | 361 | def test_valid_host_invalid_tldlist_should_return_false(self): | CODE |
| 113 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sf.py | 235 | CODE | |
| LOW | sflib.py | 254 | CODE | |
| LOW | sflib.py | 306 | CODE | |
| LOW | sflib.py | 370 | CODE | |
| LOW | sflib.py | 534 | CODE | |
| LOW | sflib.py | 562 | CODE | |
| LOW | sflib.py | 801 | CODE | |
| LOW | sflib.py | 976 | CODE | |
| LOW | sflib.py | 1191 | CODE | |
| LOW | sflib.py | 1459 | CODE | |
| LOW | sfwebui.py | 1035 | CODE | |
| LOW | sfwebui.py | 1088 | CODE | |
| LOW | sfwebui.py | 1375 | CODE | |
| LOW | sfcli.py | 228 | CODE | |
| LOW | sfcli.py | 449 | CODE | |
| LOW | sfcli.py | 854 | CODE | |
| LOW | sfcli.py | 1176 | CODE | |
| LOW | sfscan.py | 52 | CODE | |
| LOW | sfscan.py | 260 | CODE | |
| LOW | sfscan.py | 438 | CODE | |
| LOW | sfscan.py | 517 | CODE | |
| LOW | spiderfoot/db.py | 286 | CODE | |
| LOW | spiderfoot/db.py | 549 | CODE | |
| LOW | spiderfoot/db.py | 1220 | CODE | |
| LOW | spiderfoot/db.py | 1305 | CODE | |
| LOW | spiderfoot/db.py | 1598 | CODE | |
| LOW | spiderfoot/threadpool.py | 72 | CODE | |
| LOW | spiderfoot/threadpool.py | 240 | CODE | |
| LOW | spiderfoot/plugin.py | 312 | CODE | |
| LOW | spiderfoot/plugin.py | 498 | CODE | |
| LOW | spiderfoot/target.py | 157 | CODE | |
| LOW | spiderfoot/correlation.py | 133 | CODE | |
| LOW | spiderfoot/correlation.py | 410 | CODE | |
| LOW | spiderfoot/correlation.py | 608 | CODE | |
| LOW | spiderfoot/correlation.py | 744 | CODE | |
| LOW | spiderfoot/correlation.py | 793 | CODE | |
| LOW | spiderfoot/correlation.py | 985 | CODE | |
| LOW | spiderfoot/correlation.py | 617 | CODE | |
| LOW | spiderfoot/helpers.py | 344 | CODE | |
| LOW | spiderfoot/helpers.py | 372 | CODE | |
| LOW | spiderfoot/helpers.py | 400 | CODE | |
| LOW | spiderfoot/helpers.py | 559 | CODE | |
| LOW | spiderfoot/helpers.py | 774 | CODE | |
| LOW | modules/sfp_opennic.py | 129 | CODE | |
| LOW | modules/sfp_commoncrawl.py | 134 | CODE | |
| LOW | modules/sfp_dnsraw.py | 68 | CODE | |
| LOW | modules/sfp_cinsscore.py | 84 | CODE | |
| LOW | modules/sfp_cinsscore.py | 125 | CODE | |
| LOW | modules/sfp_junkfiles.py | 86 | CODE | |
| LOW | modules/sfp_surbl.py | 128 | CODE | |
| LOW | modules/sfp_fullhunt.py | 139 | CODE | |
| LOW | modules/sfp_accounts.py | 289 | CODE | |
| LOW | modules/sfp_openphish.py | 151 | CODE | |
| LOW | modules/sfp_tool_retirejs.py | 73 | CODE | |
| LOW | modules/sfp_spyonweb.py | 192 | CODE | |
| LOW | modules/sfp_hackertarget.py | 222 | CODE | |
| LOW | modules/sfp_securitytrails.py | 96 | CODE | |
| LOW | modules/sfp_securitytrails.py | 149 | CODE | |
| LOW | modules/sfp_dnsneighbor.py | 66 | CODE | |
| LOW | modules/sfp_dnsneighbor.py | 144 | CODE | |
| 127 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | sfscan.py | 114 | # Create a unique ID for this scan in the back-end DB. | COMMENT |
| MEDIUM | sfscan.py | 374 | # Create a pseudo module for the root event to originate from | COMMENT |
| MEDIUM | spiderfoot/logger.py | 55 | # Create a new database handle when the first log batch is processed | COMMENT |
| MEDIUM | modules/sfp_hackertarget.py | 337 | # Create an IP Address event stemming from the netblock as the | COMMENT |
| MEDIUM | modules/sfp_tool_testsslsh.py | 155 | # Create a temporary output file | COMMENT |
| MEDIUM | modules/sfp_builtwith.py | 249 | # Create the name/co-host | COMMENT |
| MEDIUM | modules/sfp_bingsharedip.py | 161 | # Create an IP Address event stemming from the netblock as the | COMMENT |
| MEDIUM | correlations/template.yaml | 34 | # Define the collections to perform here. Refer to the README.md | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | sflib.py | 1422 | except UnicodeDecodeError: | CODE |
| HIGH | sfcli.py | 1445 | except BaseException: | CODE |
| HIGH | spiderfoot/correlation.py | 635 | except Exception: | CODE |
| HIGH | modules/sfp_dnsdumpster.py | 74 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | spiderfoot/plugin.py | 382 | # Check if we've been asked to stop in the meantime, so that | COMMENT |
| LOW | spiderfoot/correlation.py | 1068 | # Check if any of the options aren't valid | COMMENT |
| LOW | modules/sfp_accounts.py | 313 | # Check if a state cache exists first, to not have to do this all the time | COMMENT |
| LOW | modules/sfp_slideshare.py | 103 | # Check if the profile is valid and extract name | COMMENT |
| LOW | modules/sfp_hunter.py | 139 | # Check if we have more results on further pages | COMMENT |
| LOW | modules/sfp_onioncity.py | 147 | # Check if we've been asked to stop | COMMENT |
| LOW | modules/sfp_torch.py | 102 | # Check if we've been asked to stop | COMMENT |
| LOW | modules/sfp_template.py | 273 | # Check if the module has already analysed this event data. | COMMENT |
| LOW | modules/sfp_tool_dnstwist.py | 105 | # Check if the TLD has wildcards before testing | COMMENT |
| LOW | modules/sfp_similar.py | 118 | # Check if the TLD has wildcards before testing | COMMENT |
| LOW | modules/sfp_skymem.py | 141 | # Check if we're on the last page of results | COMMENT |
| LOW | modules/sfp_onionsearchengine.py | 97 | # Check if we've been asked to stop | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | modules/sfp_sorbs.py | 0 | query dronebl dns for an ipv4 address. args: qaddr (str): ipv4 address. returns: list: dronebl dns entries | STRING |
| HIGH | modules/sfp_spamcop.py | 0 | query dronebl dns for an ipv4 address. args: qaddr (str): ipv4 address. returns: list: dronebl dns entries | STRING |
| HIGH | modules/sfp_dronebl.py | 0 | query dronebl dns for an ipv4 address. args: qaddr (str): ipv4 address. returns: list: dronebl dns entries | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | spiderfoot/__init__.py | 1 | CODE | |
| LOW | spiderfoot/__init__.py | 2 | CODE | |
| LOW | spiderfoot/__init__.py | 3 | CODE | |
| LOW | spiderfoot/__init__.py | 4 | CODE | |
| LOW | spiderfoot/__init__.py | 5 | CODE | |
| LOW | spiderfoot/__init__.py | 6 | CODE | |
| LOW | spiderfoot/__init__.py | 7 | CODE | |
| LOW | spiderfoot/__init__.py | 8 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | spiderfoot/plugin.py | 151 | def _updateSocket(self, socksProxy: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | sflib.py | 1191 | CODE |