New: Internet Standards Report

There is an updated version of the GUI live. The old style reports and custom reports have now been integrated in one report section, giving you a better overview of your reports. Custom reports can be scheduled and are available in several formats like Excel and PDF. All old reports are available as built-in reports, but not all have these scheduling and format options available (yet). The weekly pdf has moved too the new report section too. Open it and click "edit" in the upper right corner to add recipients to the mailinglist.

A new addition is the internet standards report. It's based on the checks on the internet.nl website. At this time it is still in beta and there are some minor differences. The ipv6 check for your dns server on internet.nl only checks the availability of ipv6 on the server, but ShadowTrackr checks if your AAAA record actually resolves over ipv6 on that server. And some checks are still missing, like the 0-RTT check on TLS certificates.

If you have an opinion on this new report, I'd love to hear from you :-)

Auto extract domains in API

Some of you are using the API to manage assets, and might have ran into a bug that actually is not a bug. If you add "www.shadowtrackr.com" or "test.shadowtrackr.com", the system will assume you only want to track that specific url and not the domain itself (or any other subdomains to be found).

If you do want to add the full domain and do discovery on it, then adding "shadowtrackr.com" as asset will do the trick. In the GUI this is easy and results are visible, but in the API things are less visible. To make things easy for API users, you can now add the flag "extract_domains": True to the add_assets endpoint. This will automatically extract the pay level domain from any subdomain and add it for you. After this, discovery of other subdomains will start as usual.

See the updated Github page for a python example.

More infrastructure

In the last few weeks the scanner infrastructure has more than doubled. Both more assets to scan and more scan types demanded more resources. And of course this meant that some surprises popped up that needed to be dealt with.

All is well now, and development of a new report type is almost finished.