Overall, this tool is very good. You've really created a tool that's like a Swiss Army knife. I just have a few suggestions. For example, let's say I work for a corporate company.
For example, let’s say I work for a corporate company that owns its own root domains and public subnet IP ranges. Could the tool be enhanced to continuously monitor the organization’s subdomains, reverse IP records, and related assets, and then alert, record, and notify us whenever a new subdomain, a new directory or path under an existing asset, or a new login page is detected?
This feature could also support bug bounty scope monitoring by tracking newly discovered assets and automatically scanning them for vulnerabilities when changes occur. It would be useful for the tool to integrate with sources and tools such as URLFinder, GAU, and the Wayback Machine to collect historical and current web URLs, store previous scan results, and compare them against new findings.
In general, monitoring an organization’s IP ranges, root domains, and subdomains is very important. Subdomains should be discovered using both standard subdomain enumeration techniques and reverse IP-based discovery methods. Detecting and alerting on new login pages, directories, paths, and other organization-owned assets would provide significant value.
Additionally, newly discovered and valid subdomains could be scanned with tools such as Nuclei to identify potential vulnerabilities, and any new findings could be recorded and reported automatically. This would make the tool more useful for continuous asset monitoring, login page discovery, bug bounty coverage tracking, and vulnerability detection across the organization’s authorized scope.
Example projects.
https://github.com/killua889/subdomain-monitor
https://github.com/xalgord/reconx
https://github.com/BitTheByte/Monitorizer/
Overall, this tool is very good. You've really created a tool that's like a Swiss Army knife. I just have a few suggestions. For example, let's say I work for a corporate company.
For example, let’s say I work for a corporate company that owns its own root domains and public subnet IP ranges. Could the tool be enhanced to continuously monitor the organization’s subdomains, reverse IP records, and related assets, and then alert, record, and notify us whenever a new subdomain, a new directory or path under an existing asset, or a new login page is detected?
This feature could also support bug bounty scope monitoring by tracking newly discovered assets and automatically scanning them for vulnerabilities when changes occur. It would be useful for the tool to integrate with sources and tools such as URLFinder, GAU, and the Wayback Machine to collect historical and current web URLs, store previous scan results, and compare them against new findings.
In general, monitoring an organization’s IP ranges, root domains, and subdomains is very important. Subdomains should be discovered using both standard subdomain enumeration techniques and reverse IP-based discovery methods. Detecting and alerting on new login pages, directories, paths, and other organization-owned assets would provide significant value.
Additionally, newly discovered and valid subdomains could be scanned with tools such as Nuclei to identify potential vulnerabilities, and any new findings could be recorded and reported automatically. This would make the tool more useful for continuous asset monitoring, login page discovery, bug bounty coverage tracking, and vulnerability detection across the organization’s authorized scope.
Example projects.
https://github.com/killua889/subdomain-monitor
https://github.com/xalgord/reconx
https://github.com/BitTheByte/Monitorizer/