praetorian-inc/gato

Improve CLI Parameter Handling

Opened this issue · 0 comments

Gato has a lot of CLI parameters. Currently, these are passed as arguments to each module object (e.g. enumeration, attack). It would be good to move these to a configuration object that is passed to the enumeration class in order to prevent parameter bloat.

This will help facilitate adding more parameters and perhaps enumeration profiles for public repositories. I'm envisioning something like nmap's profiles.

The profiles will wrap a commonly used set of parameters (for example, look for non-ephemeral self-hosted runners in public repositories and focus on run-log analysis, or skip runner enumeration and focus on secrets and repository permissions).