Auto extract domains in API

Some of you are using the API to manage assets, and might have ran into a bug that actually is not a bug. If you add "www.shadowtrackr.com" or "test.shadowtrackr.com", the system will assume you only want to track that specific url and not the domain itself (or any other subdomains to be found).

If you do want to add the full domain and do discovery on it, then adding "shadowtrackr.com" as asset will do the trick. In the GUI this is easy and results are visible, but in the API things are less visible. To make things easy for API users, you can now add the flag "extract_domains": True to the add_assets endpoint. This will automatically extract the pay level domain from any subdomain and add it for you. After this, discovery of other subdomains will start as usual.

See the updated Github page for a python example.

More infrastructure

In the last few weeks the scanner infrastructure has more than doubled. Both more assets to scan and more scan types demanded more resources. And of course this meant that some surprises popped up that needed to be dealt with.

All is well now, and development of a new report type is almost finished.

Memory problems

After an update of some components of underlying software, our servers have shown signs of memory leaks. Rolling back will mean detecting less software, so we are currently pushing through with some workarounds.

This problem has the highest priority. Apologies for the slower services.