When scilla performs subdomain enumeration it takes a list of possible hostnames and then performes concurrent requests to see which hostnames are alive.
We can use also the -db option to scan subdomains open database (see https://github.com/edoardottt/scilla/issues/29).
The feature could be this:
When -db is active if another flag is provided (could be -no-check) scilla could just print the subdomains gathered from public databases without check if they are alive or not. (Like assetfinder, findomain and so on...)
Pay attention to the required checks:
-no-check is okay only when -db is provided.
If -w active there can't be the -no-check flag active.
When scilla performs subdomain enumeration it takes a list of possible hostnames and then performes concurrent requests to see which hostnames are alive.
We can use also the
-db
option to scan subdomains open database (see https://github.com/edoardottt/scilla/issues/29).The feature could be this:
When
-db
is active if another flag is provided (could be-no-check
) scilla could just print the subdomains gathered from public databases without check if they are alive or not. (Like assetfinder, findomain and so on...)Pay attention to the required checks:
-no-check
is okay only when-db
is provided.-w
active there can't be the-no-check
flag active.What about report subcommand?