Scanner Framework

The Scanner Framework provides a convenient and easy way to add scanners to the Surface ecosystem, leveraging it's asset inventory (IPs and DNS Records) and its tagging system, to scan multiple targets for specific vulnerabilities or risks, and handle the results as necessary - which require custom implementation by everyone.

The Framework will pick targets based on the Input. The Input is a customisable class that lets users specify which assets will be targeted for the scan. We took a design decision to not consider any other form of assets other than DNS and IPs mostly to keep the framework simple and easy to work with. Hence, those interested in other forms of inputs other than DNS Records and IPs should implement the necessary Input classes on their side.

• Creating a New Scanner
• Creating Custom Input Generators and Parsers