Introduction
October has been another busy one for the FractalScan Surface team, with even more data being added to our public API as well as summary report co-branding.
More discovery data available from the public API
Integrating FractalScan into your wider toolkit is a great way for your team to work more efficiently. We are committed to continuing to add more data and capabilities to make sure you get the most out of it. Last month we added the ability to get domain information from the API and this month we have also added endpoints for IPs, web presence and out of scope domains. Full details of the new endpoints can be found in our public API documentation.
These endpoints are available to all existing API users: those with Premium, Enterprise and MSP plans. Please contact us to discuss getting access to the API.
IP addresses
There are two new endpoints in the API. An endpoint for getting the count of IPs:
And one for getting the IPs and their details:
This allows you to get all the following details for a scan:
- IP address
- DNS sources e.g. domains
- Hosted services and TLS certificates
- Hosting: ASNs, cloud regions, entities
- Location information
- Risk counts
- Other characteristics: seeds, created and updated date-times
Web presence details
Similarly to IPs, there are two new endpoint for web presence data. Firstly, an endpoint to get a count of the web presence URLs for a scan:
Details of the web presence URLs found by each scan:
Similar to the Web Presence page in the app, the following details are available via the API:
- The URL and domain
- HTTP details
- Details of redirects
- Other web page attributes: third party components used, log in forms present, created and updated date-times
Out of scope domains
All of the other discovery data endpoints include details of in scope assets only. These next two endpoints provide data based on the out of scope domains identified by FractalScan. An overview of how FractalScan determines what is in and out of scope can be found here.
The out of scope domains are also presented as two endpoints. First, a count of the out of scope domains:
Second, details of the out of scope domains:
As FractalScan doesn’t fully explore the out of scope domains, less data is available for these domains than the in scope ones. When out of scope domains are requested for a scan, a list of the domains and the created and updated date-times are returned.
If you wish to add an out of scope domain into scope using the API, you can use the Add a seed to a scan by ID endpoint: POST /v1/scans/{id}/seeds
Summary report co-branding
For users who wish to share FractalScan results with others, e.g. MSP partners who are running FractalScan for their clients, or those scanning businesses in their supply chain, you can now co-brand the summary report.
You can upload your company logo in the organisation settings.
Once a logo has been uploaded, when you create a new summary report, by default this will be included on the report, but you can choose to opt out of this each time if necessary.
Once your report has been generated, you will see your logo at the top of each page.
Resolved IPs for CNAMEs
When analysing DNS records for discovered domains, FractalScan will identify CNAME (canonical name) records, which are alias to other domains. They are typically used to map sub-domains to the domain actually hosting content, e.g. ’trebuchet.example.com’ would have a CNAME record to ’trebuchet.me'.
Previously, unless part of a seed domain’s infrastructure, we didn’t follow CNAME DNS records beyond the domain they were pointing to. Following user feedback, we’ve updated the app to follow CNAMEs further. In addition to the IP of the CNAME record, you can also see ASNs, IP ranges and cloud regions, allowing you to see where CNAME domains are hosted.
As well as on the domains page, this additional data is also reflected in the CSV export and the domains API endpoint.
As we will now be finding additional out-of-scope data related to CNAMEs, we’ve added the number of out-of-scope IPs and domains to the discovery stats widget on the dashboard. These appear under the existing counts, which continue to only include in scope data. We hope this will help you get a better idea of the scale of your attack surface.
This new CNAME discovery data will be available in new scans, rescans or continuously running scans once they’ve been triggered.
Risk remediations in the Risks & Actions report
We’ve added the remediation steps into the risks tab of the Risks & Actions report, in addition to the actions tab. This gives people who don’t have access to the app an extra layer of data to work with.
Coming soon
- Free FractalScan accounts to try out some of the key features before you buy.
- Self-service upgrading of your FractalScan plan within the app.
- Improved mobile user experience.
- Better visibility of the domain & IP limits that are applied to your account.
