sif is built with a modular architecture, allowing for easy extension and customization. Some of our key modules include:
- 📂 Directory/file fuzzing/scanning
- 📡 DNS subdomain enumeration
- 🐾 Common Web scanning
- 🖥️ Port/service scanning
- 🦠 Vulnerability scanning
- Support for pre-existing nuclei templates
- Metasploit emulation for execution
- 🔎 Automated Google dorking
- 💘 Shodan integration
- 📦 CMS detection
- 🔍 HTTP Header Analysis
- ☁️ C3 Misconfiguration Scanner
- 🔍 Subdomain Takeover Checks
Visit our Releases page to download the latest pre-built binary for your operating system.
- Ensure you have Go 1.23+ installed on your system.
- Clone the repository:
git clone https://github.com/lunchcat/sif.git cd sif - Build using the Makefile:
make - The binary will be available in the root directory.
- Run a basic scan:
./sif -u example.com - For more options and advanced usage, refer to the help command:
./sif -h
sif offers a wide range of commands and options to customize your pentesting workflow. Here are some common usage examples:
- Directory fuzzing
./sif -u http://example.com -dirlist medium
- Subdomain enumeration
./sif -u http://example.com -dnslist medium
- Supabase/Firebase and C3 Vulnerability scanning
./sif -u https://example.com -js -c3
- Port scanning
./sif -u https://example.com -ports common
For a complete list of commands and options, run ./sif -h.
sif is designed for high performance and efficiency:
- Written in Go for excellent concurrency and speed
- Optimized algorithms for minimal resource usage
- Supports multi-threading for faster scans
- Efficient caching mechanisms to reduce redundant operations
We welcome contributions from the community! Please read our Contributing Guidelines before submitting a pull request.
Areas we're particularly interested in:
- New scanning modules
- Performance improvements
- Documentation enhancements
- Bug fixes and error handling improvements
Thanks to these wonderful people who have contributed to sif:
 mel 🚧 🧑🏫 📆 🛡️ |
 ProjectDiscovery 📦 |
 macdoos 💻 |
 Matthieu Witrowiez 🤔 |
 tessa 🚇 💬 📓 |
 Eva 📝 🖋 🔬 🛡️ |
We'd like to thank the following projects and communities for their inspiration and support:
- ProjectDiscovery for their amazing open-source security tools
- Shodan
- Malcore, for providing us direct API support at Lunchcat.
Built with ❤️ by the lunchcat team and contributors worldwide