Arbeitsstation für das Management externer Angriffsflächen, die DNS-, Certificate-Transparency-, Shodan-, CVEDB-, TLS- und OSINT-Daten zu risikobewerteten forensischen Berichten korreliert.
SniperScope ist eine hochperformante External Attack Surface Management (EASM)-, passive/aktive OSINT-Intelligence- und forensische Reporting-Workstation, die für Cybersicherheits-Auditoren, SOC-Analysten und Penetrationstester entwickelt wurde.
Ausgehend von einem einzelnen Ziel (Domainname, vollständige URL oder IPv4/IPv6-Adresse) orchestriert SniperScope mehrere Intelligence-Engines parallel:
.log).flowchart LR
subgraph Auth["🔐 Operator Access (Gatekeeper)"]
direction TB
LoginScreen["🔑 LoginScreen\nHMAC-SHA256 Token\n(sniperadmin / Passphrase)"]
end
subgraph Frontend["🖥️ Frontend (React 19 + Vite 8 + Tailwind CSS v4)"]
direction TB
TargetInput["🔍 TargetInput\n(Domain / IP / URL / OPSEC Mode)"]
WarpToggle["🛡️ WARP / Proxy Egress Status\n(Active / Standby · Ping ms · Egress IP)"]
FootprintStation["🕵️ Digital Footprint & Spain Hub\n(Usernames · Spain OSINT · Phone · Email)"]
Dossier["📋 IntelDossier\nKPIs · Ports · CVEDB · Web/TLS · SCA · CLI Playbook"]
Cytoscape["🕸️ GraphCanvas (Cytoscape.js)\nForce-Directed · Concentric Radial · Tree"]
Exporter["📄 ForensicReportModal\nPDF · HTML · Markdown · RAW Trace (.log)"]
end
subgraph Backend["⚙️ Asynchronous Backend (FastAPI + Python 3.11+)"]
direction TB
Sanitizer["🛡️ Sanitizer & Target Normalizer\n(In-memory _SCAN_CACHE TTL 300s)"]
ParallelEngine["🚀 Parallel Asyncio Engine\n(DNS / CT Logs / RDAP / HTTP / Shodan)"]
OutboundProxy["🌐 Egress Proxy Handler\n(Cloudflare WARP 127.0.0.1:40000)"]
RiskCalc["📊 Dynamic Risk Engine\n(Score 0-100 · Grades A-F · Weighted Findings)"]
RawTrace["🧾 RAW Chronological Execution Trace\n(Command & Request Audit Log)"]
end
subgraph IntelSources["🌐 External Intelligence Providers"]
direction TB
DNS_Mod["DNS & CAA Anti-Spoofing\n(A, AAAA, MX, NS, TXT, CAA, SPF, DMARC)"]
CRT_Mod["Certificate Transparency\n(crt.sh Logs + Origin IP Lookup)"]
Shodan_Mod["Shodan Host & InternetDB\n(Ports, CPEs, Versions, Banners)"]
CVEDB_Mod["Shodan CVEDB\n(CVSS, EPSS, CISA KEV, Ransomware)"]
HTTP_Mod["Web Audit, TLS X.509 & SCA\n(Chain, SHA-256, Web Tech, WAF, CORS)"]
RDAP_Mod["RDAP / ASN\n(Registrar, Netblock, BGP Routing)"]
Footprint_Mod["SOCMINT & Spanish Public Gazettes\n(BOE, BORME, CENDOJ, Catastro, CNMC)"]
end
Auth --> Frontend
TargetInput -->|GET /api/scan| Sanitizer
WarpToggle -->|GET /api/health| OutboundProxy
FootprintStation -->|SSE /api/sherlock/stream| Footprint_Mod
Sanitizer --> ParallelEngine
ParallelEngine --> OutboundProxy
OutboundProxy --> IntelSources
DNS_Mod & CRT_Mod & CVEDB_Mod & HTTP_Mod & RDAP_Mod --> RiskCalc
RiskCalc --> RawTrace
RawTrace -->|JSON Payload| Dossier
RawTrace -->|Nodes & Edges| Cytoscape
RawTrace -->|Trace & Findings| Exporter