edoardottt / scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
https://edoardoottavianelli.it
GNU General Public License v3.0
915 stars 113 forks source link

Add No Response detection #33

Closed edoardottt closed 3 years ago

edoardottt commented 3 years ago

When scilla performs subdomain enumeration it takes a list of possible hostnames and then performes concurrent requests to see which hostnames are alive.
We can use also the -db option to scan subdomains open database (see https://github.com/edoardottt/scilla/issues/29).

The feature could be this:
When -db is active if another flag is provided (could be -no-check) scilla could just print the subdomains gathered from public databases without check if they are alive or not. (Like assetfinder, findomain and so on...)

Pay attention to the required checks:

What about report subcommand?