Last week I launched a draft of the Gov.my Audit, and this week we have version 2.0

Here’s what changed:

1. Added More Sites. We now scan a total of 1324 government websites, up from just 1180.
2. Added Shodan Results. Results includes both the open ports and time of the Shodan scan (scary shit!)
3. Added Site Title. Results now include the HTML title to give a better description of the site (hopefully!).
4. Added Form Fields. If the page on the root directory has an input form, the names of the fields will appear in the results. This allows for a quick glance at which sites have forms, and (roughly!) what the form ask for (search vs. IC Numbers).
5. Added Domain in the CSV. The CSV is sorted by hostname, to allow for grouping by domain names (e.g. view all sites from selangor.gov.my or perlis.gov.my)
6. Added an API. Now you can query the API can get more info on the site, including the cert info and HTTP headers.
7. Released the Serverless.yml files for you to build the API yourself as well :)

All in all, it's a pretty bad-ass project (if I do say so myself). So let's take all that one at a time.