Merge testing into master for v4.3.0 release

Author: h0tak88r

.gitignore

@@ -60,6 +60,7 @@ logs/
 # Test files and directories
 test-*
 *test*
+!*_test.go
 !tests/
 !tests/ui/
 !tests/ui/*.test.js

README.md

@@ -566,9 +566,12 @@ WHOISXMLAPI_API_KEY=...
 ZOOMEYE_USERNAME=...
 ZOOMEYE_PASSWORD=...
 
-# Bug bounty platforms
-H1_API_KEY=...           # HackerOne
-INTEGRITI_API_KEY=...    # Intigriti
+# Bug bounty platforms (Programs page + Targets page + `autoar scope`)
+H1_USERNAME=...          # HackerOne
+H1_TOKEN=...             # HackerOne API token
+BUGCROWD_TOKEN=...       # Bugcrowd _crowdcontrol_session_key cookie
+INTIGRITI_TOKEN=...      # Intigriti researcher API token (INTIGRITI_API_KEY also accepted)
+YWH_TOKEN=...            # YesWeHack JWT
 
 # AI analysis — only ONE key is needed
 #  Recommended (free): OpenCode Zen (no credit card required)

docker-compose.yml

@@ -66,8 +66,14 @@ services:
             - ZOOMEYE_USERNAME=${ZOOMEYE_USERNAME:-}
             - ZOOMEYE_PASSWORD=${ZOOMEYE_PASSWORD:-}
             - ZOOMEYEAPI_API_KEY=${ZOOMEYEAPI_API_KEY:-}
+            # Bug bounty platform credentials (Programs + Targets pages, `autoar scope`)
             - H1_API_KEY=${H1_API_KEY:-}
-            - INTEGRITI_API_KEY=${INTEGRITI_API_KEY:-}
+            - H1_USERNAME=${H1_USERNAME:-}
+            - H1_TOKEN=${H1_TOKEN:-}
+            - BUGCROWD_TOKEN=${BUGCROWD_TOKEN:-}
+            - INTIGRITI_TOKEN=${INTIGRITI_TOKEN:-}
+            - INTIGRITI_API_KEY=${INTIGRITI_API_KEY:-}
+            - YWH_TOKEN=${YWH_TOKEN:-}
 
             # Database Configuration
             # Database Type: "postgresql" or "sqlite"

env.example

@@ -170,9 +170,20 @@ ZOOMEYE_USERNAME=your_zoomeye_username_here
 ZOOMEYE_PASSWORD=your_zoomeye_password_here
 ZOOMEYEAPI_API_KEY=your_zoomeyeapi_key_here
 
-# Bug Bounty Platform APIs
-H1_API_KEY=your_hackerone_key_here
-INTEGRITI_API_KEY=your_integriti_key_here
+# ============================================================================
+# BUG BOUNTY PLATFORM CREDENTIALS
+# Power the Programs page (program monitor + scope) and the Targets page /
+# `autoar scope`. Set the platforms you use; leave the rest blank.
+# ============================================================================
+# HackerOne — username + API token (https://hackerone.com/settings/api_token)
+H1_USERNAME=
+H1_TOKEN=
+# Bugcrowd — value of the _crowdcontrol_session_key session cookie
+BUGCROWD_TOKEN=
+# Intigriti — researcher API token. INTIGRITI_API_KEY is accepted as an alias.
+INTIGRITI_TOKEN=
+# YesWeHack — JWT token (no email/password needed)
+YWH_TOKEN=
 
 # ============================================================================
 # AI / LLM PROVIDERS

go.mod

@@ -21,6 +21,7 @@ require (
 	github.com/joeguo/tldextract v0.0.0-20220507100122-d83daa6adef8
 	github.com/juju/persistent-cookiejar v1.0.0
 	github.com/majd/ipatool/v2 v2.2.0
+	github.com/miekg/dns v1.1.68
 	github.com/projectdiscovery/dnsx v1.2.2
 	github.com/projectdiscovery/goflags v0.1.74
 	github.com/projectdiscovery/httpx v1.8.1
@@ -35,6 +36,7 @@ require (
 	github.com/sirupsen/logrus v1.9.3
 	github.com/spf13/cobra v1.10.2
 	github.com/sw33tLie/bbscope v0.0.0-20251113222800-c453973e83dd
+	github.com/tidwall/gjson v1.18.0
 	go.opentelemetry.io/otel v1.38.0
 	go.opentelemetry.io/otel/sdk v1.38.0
 	go.opentelemetry.io/otel/trace v1.38.0
@@ -285,7 +287,6 @@ require (
 	github.com/mholt/archives v0.1.5 // indirect
 	github.com/microcosm-cc/bluemonday v1.0.27 // indirect
 	github.com/microsoft/go-mssqldb v1.9.2 // indirect
-	github.com/miekg/dns v1.1.68 // indirect
 	github.com/mikelolasagasti/xz v1.0.1 // indirect
 	github.com/minio/minlz v1.0.1 // indirect
 	github.com/minio/selfupdate v0.6.1-0.20230907112617-f11e74f84ca7 // indirect
@@ -388,7 +389,6 @@ require (
 	github.com/syndtr/goleveldb v1.0.0 // indirect
 	github.com/tidwall/btree v1.8.1 // indirect
 	github.com/tidwall/buntdb v1.3.2 // indirect
-	github.com/tidwall/gjson v1.18.0 // indirect
 	github.com/tidwall/grect v0.1.4 // indirect
 	github.com/tidwall/match v1.2.0 // indirect
 	github.com/tidwall/pretty v1.2.1 // indirect