$ show stanislav-web/OpenDoor
OpenDoor is an advanced CLI security reconnaissance platform for directory discovery, subdomain enumeration, WAF detection, and content fingerprinting. It employs a modular architecture with a plugin-based analysis pipeline (sniffers), network transport abstraction (direct, proxy, VPN), and extensive output formatting (JSON, CSV, SQLite, SARIF). Its core scanning engine, state machine, and plugin systems demonstrate sophisticated engineering, featuring auto-calibration, semantic soft-404 diffing, and a clean exception hierarchy.
The LLM identified 5 files worth highlighting for reuse:
Provides a reusable DiffReportComparator that normalizes findings from SQLite/JSON report sources, groups them by identity, and produces a structured diff output. Cleanly isolated from the scanner core, suitable for comparing any historical data snapshots.
Abstract BaseTransport class defining start/stop/healthcheck lifecycle. Concrete adapters (Direct, Proxy, OpenVPN, WireGuard) encapsulate external process management and tunnel configuration behind a stable interface. A model example of the Adapter/Strategy pattern for heterogeneous system dependencies.
Secure, progressive file downloader with streamed size limits and UTF-8 validation. Automatically cleans up partial files on failure. Solves the generic problem of safely acquiring and validating remote text assets.
Heuristic content type classifier (HTML, JSON, XML, JS, CSS, text, binary, empty) using byte analysis, JSON parsing, and HTML tokenization. Provides a bounded, safe view of response bodies for downstream analysis. Isolates complex signal detection that is reusable in any web content analysis tool.
Implements a plugin engine for multi-stage security analysis (detector -> suppressor -> active). Defines a strict execution order and a contract for structured findings (SnifferResult, PassiveFinding). The engine pattern itself is a cleanly architected, extensible pipeline broadly applicable beyond the security domain.