cedry2k1992andClaude Sonnet 5
86f73c46b2
Two pure-PHP collectors, no Python/venv/subprocess needed:
- GravatarRunner (email): checks gravatar.com/avatar/{md5}?d=404 for a
200 vs 404. Scoped to that binary signal since Gravatar's profile
JSON endpoint now requires API auth even for real, public profiles
(confirmed against Gravatar's own creator's email).
- DnsRunner (domain): dns_get_record() for A/AAAA/MX/NS/TXT/CNAME. Raw
payload is naturally keyed by record type, which the existing
generic list-renderer on the investigation page turns into one
collapsible section per type with no UI changes needed.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
37 lines
1.3 KiB
PHP
37 lines
1.3 KiB
PHP
<?php
|
|
|
|
namespace App\Providers;
|
|
|
|
use Illuminate\Cache\RateLimiting\Limit;
|
|
use Illuminate\Support\Facades\RateLimiter;
|
|
use Illuminate\Support\ServiceProvider;
|
|
|
|
class AppServiceProvider extends ServiceProvider
|
|
{
|
|
/**
|
|
* Register any application services.
|
|
*/
|
|
public function register(): void
|
|
{
|
|
//
|
|
}
|
|
|
|
/**
|
|
* Bootstrap any application services.
|
|
*/
|
|
public function boot(): void
|
|
{
|
|
// Self-imposed limits so bulk-running lookups doesn't hammer the
|
|
// free public infrastructure these runners depend on. ip-api.com's
|
|
// limit (45/min) is theirs; the rest are courtesy limits of ours.
|
|
RateLimiter::for('osint-runner:ip-api', fn () => Limit::perMinute(45));
|
|
RateLimiter::for('osint-runner:crtsh', fn () => Limit::perMinute(30));
|
|
RateLimiter::for('osint-runner:whois', fn () => Limit::perMinute(20));
|
|
RateLimiter::for('osint-runner:sherlock', fn () => Limit::perMinute(10));
|
|
RateLimiter::for('osint-runner:theharvester', fn () => Limit::perMinute(5));
|
|
RateLimiter::for('osint-runner:holehe', fn () => Limit::perMinute(15));
|
|
RateLimiter::for('osint-runner:gravatar', fn () => Limit::perMinute(45));
|
|
RateLimiter::for('osint-runner:dns', fn () => Limit::perMinute(60));
|
|
}
|
|
}
|