Directories
¶
| Path | Synopsis |
|---|---|
|
Package auth implements the four headless OAuth grants Geiger supports.
|
Package auth implements the four headless OAuth grants Geiger supports. |
|
Package browser models the impact of a malicious Chromium browser extension (CursedChrome-style browser proxy, infostealer, sideloaded MV3 extension).
|
Package browser models the impact of a malicious Chromium browser extension (CursedChrome-style browser proxy, infostealer, sideloaded MV3 extension). |
|
Package color provides terminal coloring that is a no-op unless enabled, so output stays clean when piped or redirected (codes would otherwise pollute files and tools like jq).
|
Package color provides terminal coloring that is a no-op unless enabled, so output stays clean when piped or redirected (codes would otherwise pollute files and tools like jq). |
|
Package dbrecon runs read-only data-plane recon against a database connection string.
|
Package dbrecon runs read-only data-plane recon against a database connection string. |
|
Package imds harvests credentials from cloud instance-metadata services (AWS IMDS, GCP/Azure metadata, Kubernetes in-cluster SA, Alibaba, DigitalOcean, OCI) and normalizes each into a synthetic dotenv blob that geiger's normal recognizers pick up.
|
Package imds harvests credentials from cloud instance-metadata services (AWS IMDS, GCP/Azure metadata, Kubernetes in-cluster SA, Alibaba, DigitalOcean, OCI) and normalizes each into a synthetic dotenv blob that geiger's normal recognizers pick up. |
|
Package module defines Geiger's core domain types and the Module contract.
|
Package module defines Geiger's core domain types and the Module contract. |
|
recipe
Package recipe builds declarative HTTP modules.
|
Package recipe builds declarative HTTP modules. |
|
Package modules is the credential catalog.
|
Package modules is the credential catalog. |
|
Package note renders a module's Note for the terminal or as JSON.
|
Package note renders a module's Note for the terminal or as JSON. |
|
Package parse turns raw input (a file, stdin, or the environment) into a Blob: the original text plus a flattened key/value view and any structured form (JSON object, INI sections).
|
Package parse turns raw input (a file, stdin, or the environment) into a Blob: the original text plus a flattened key/value view and any structured form (JSON object, INI sections). |
|
Package pipeline wires the stages together: parsed blob → recognize → for each match (authenticate → recon → summarize) → notes.
|
Package pipeline wires the stages together: parsed blob → recognize → for each match (authenticate → recon → summarize) → notes. |
|
Package recognize routes parsed input to modules.
|
Package recognize routes parsed input to modules. |
|
Package recon provides the single HTTP client every module uses for recon.
|
Package recon provides the single HTTP client every module uses for recon. |
|
Package redact masks secret material so it never appears in Geiger output.
|
Package redact masks secret material so it never appears in Geiger output. |
|
Package score derives a relative blast-radius score and tier for a Note.
|
Package score derives a relative blast-radius score and tier for a Note. |
|
Package sign holds the request/assertion signing schemes Geiger modules need: RS256 JWT assertions (GCP, Salesforce, Snowflake), Azure SharedKey, HTTP Digest (MongoDB Atlas), and generic HMAC.
|
Package sign holds the request/assertion signing schemes Geiger modules need: RS256 JWT assertions (GCP, Salesforce, Snowflake), Azure SharedKey, HTTP Digest (MongoDB Atlas), and generic HMAC. |
Click to show internal directories.
Click to hide internal directories.