Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion quickstart/index.mdx
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
title: 'ProjectDiscovery Quick Start Guide'
description: 'Get started with ProjectDiscovery for asset discovery, vulnerability scanning, and exposure monitoring'
description: 'Get started with ProjectDiscovery for asset discovery, vulnerability scanning and exposure monitoring'
sidebarTitle: 'Overview'
---

Expand All @@ -14,15 +14,15 @@

Recent high-profile breaches demonstrate why continuous security monitoring is crucial:

- **Capital One (2019)**: Attackers exploited a misconfigured web application firewall and SSRF vulnerability to access an exposed AWS S3 bucket, stealing sensitive customer data.

Check warning on line 17 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L17

Did you really mean 'misconfigured'?

- **Uber (2016/2017)**: Hackers discovered cloud access credentials accidentally committed in a GitHub repository, using them to access AWS and extract millions of user and driver records.

Check warning on line 19 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L19

Did you really mean 'Uber'?

- **Equifax (2017)**: An unpatched Apache Struts vulnerability (CVE-2017-5638) in a public-facing web application allowed remote code execution, compromising personal data of around 143 million people.

Check warning on line 21 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L21

Did you really mean 'Equifax'?

Check warning on line 21 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L21

Did you really mean 'unpatched'?

- **Colonial Pipeline (2021)**: A legacy VPN account without multi-factor authentication was exploited using stolen credentials, granting attackers access to the network and triggering a ransomware attack.

- **Panera Bread (2018)**: An unsecured API endpoint exposed customer data in plain text, enabling attackers to enumerate records via sequential IDs and scrape millions of user profiles.

Check warning on line 25 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L25

Did you really mean 'Panera'?

These incidents highlight why organizations need robust security monitoring and vulnerability management. ProjectDiscovery's platform helps prevent such breaches by continuously monitoring your attack surface and validating security controls.

Expand Down Expand Up @@ -99,7 +99,7 @@

2. **Add Your Assets:** Once in the dashboard, start your asset discovery by adding a **root domain** or organization name. For example, add **`yourcompany.com`** as a root domain. The platform will automatically enumerate subdomains, IP addresses, and related assets linked to that domain. You can add up to a certain number of domains for free — e.g. your company's main domains. ProjectDiscovery will use its scanners behind the scenes to give you an instant inventory of your external assets.

3. **Initiate a Vulnerability Scan:** After your assets are discovered, launch an automated vulnerability scan in the cloud platform. You can navigate to the **Scans** section, select your asset or asset group, and start a **Nuclei scan** (Nuclei is the engine that runs vulnerability templates). Use the default template set to scan for a wide range of common issues. The scan runs in the cloud, testing your assets for exploitable vulnerabilities (like misconfigurations, outdated software, and known CVEs).

Check warning on line 102 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L102

Did you really mean 'misconfigurations'?

Check warning on line 102 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L102

Did you really mean 'CVEs'?

4. **Continuous Monitoring:** ProjectDiscovery Cloud will **continuously monitor** your assets without further input. This means if a new subdomain appears tomorrow or a new critical vulnerability emerges in the template feed, the platform can automatically discover and scan it. You can also schedule regular scans (e.g. daily or weekly) for ongoing coverage. Essentially, once your assets are added, the cloud platform keeps an eye on them and updates findings in real-time.

Expand All @@ -117,7 +117,7 @@
```bash
go install -v github.com/projectdiscovery/pdtm/cmd/pdtm@latest
```
After installation, run `pdtm -ia` (install all) to automatically download and set up all ProjectDiscovery CLI tools. This one command gives you access to **Nuclei**, **Subfinder**, **HTTPx**, and many more tools in one go.

Check warning on line 120 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L120

Did you really mean 'Subfinder'?

Check warning on line 120 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L120

Did you really mean 'HTTPx'?

- *Install Individually:* Alternatively, you can install tools individually. For example:
```bash
Expand All @@ -125,21 +125,21 @@
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest
```
This will fetch the latest Subfinder, HTTPx, and Nuclei binaries into your `$GOPATH/bin`. (You can also find pre-built binaries on the ProjectDiscovery GitHub or use package managers like Homebrew on macOS.)

Check warning on line 128 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L128

Did you really mean 'Subfinder'?

Check warning on line 128 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L128

Did you really mean 'HTTPx'?

*Note:* Ensure your Go `bin` path is in your `PATH` environment variable so you can run the tools from any directory. Once installed, you can verify by running `subfinder -h`, `httpx -h`, and `nuclei -h` to see the help output.

**2. Asset Discovery with Subfinder:** To immediately see value from the CLI, start by discovering assets. For example, to find subdomains of a target domain:

Check warning on line 132 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L132

Did you really mean 'Subfinder'?
```bash
subfinder -d example.com -o subdomains.txt
```
This command uses passive sources to enumerate subdomains of **example.com** and saves the results to `subdomains.txt`. In seconds, you'll get a list of domains that are part of the target's attack surface. (You can also run `subfinder -d example.com` without the `-o` flag to just print results to the screen.)

**3. Probing Assets with HTTPx:** Often, you'll want to know which of those discovered domains are alive and what web technologies they are running. **HTTPx** can take a list of hostnames and probe them for active web services:

Check warning on line 138 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L138

Did you really mean 'HTTPx'?

Check warning on line 138 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L138

Did you really mean 'HTTPx'?

Check warning on line 138 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L138

Did you really mean 'hostnames'?
```bash
httpx -l subdomains.txt -o live_hosts.txt -title -status-code -silent
```
Here, the `-title` and `-status-code` flags tell HTTPx to fetch the page title and HTTP status code for each host, and `-silent` removes verbose headers for clean output. The results saved in `live_hosts.txt` will show you which subdomains are up, and give a hint of what each is (for example, a status 200 and a title "Login Portal" might indicate a login page). This helps you focus on active targets.

Check warning on line 142 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L142

Did you really mean 'HTTPx'?

**4. Vulnerability Scanning with Nuclei:** Now for the real value – finding vulnerabilities. **Nuclei** is a fast vulnerability scanner that uses template files to check targets for hundreds of known issues. You can run Nuclei against a single URL or a list:
```bash
Expand Down Expand Up @@ -185,16 +185,16 @@
</CardGroup>

### Asset Discovery
The first step in securing your attack surface is knowing what assets you have. ProjectDiscovery simplifies **asset discovery** by automatically finding and inventorying assets across your domains and cloud environments. In the Cloud platform, you can start with a few **root domains**, and the system will continuously discover all subdomains, related hosts, and even cloud infrastructure tied to those domains. This gives you an up-to-date inventory of external-facing assets (websites, APIs, servers, etc.) without manual effort. On the CLI side, tools like Subfinder (for subdomains) and Cloudlist (for cloud resources) let you script out asset discovery as well. By quickly building a comprehensive asset list, you ensure that no part of your external infrastructure is overlooked.

Check warning on line 188 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L188

Did you really mean 'Subfinder'?

Check warning on line 188 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L188

Did you really mean 'Cloudlist'?

### Real-time Vulnerability Scanning
Once you have an asset inventory, the next workflow is to find **exploitable vulnerabilities** on those assets – ideally before attackers do. ProjectDiscovery's approach focuses on *real-time, template-driven scanning*. The Cloud platform continuously runs vulnerability scans using the latest **Nuclei templates** contributed by the community and ProjectDiscovery researchers, so it can catch newly disclosed issues fast. You can perform on-demand scans (for example, after a new deployment) or schedule regular scans across all assets. In practice, this means if a critical vulnerability (say, a new RCE in a popular software) is added to the templates, ProjectDiscovery can detect it on your systems within minutes of its disclosure. Using the CLI, you can integrate Nuclei into your CI/CD or scripts to scan specific targets (for instance, scanning every new build of an application before release). The result is a proactive vulnerability management process – you're finding and fixing weaknesses *in real time*, rather than reacting after an incident.

### Exposure Management
Security isn't a one-time effort. **Exposure management** is about continuously monitoring for changes or new risks in your environment, both external and internal, and responding quickly. ProjectDiscovery Cloud excels here by offering continuous monitoring of your attack surface. Once you've added your assets, it will keep checking for things like new subdomains popping up, services changing, or new vulnerabilities arising. If an exposure is found – for example, an open database becomes visible or an internal server starts exposing a port – the platform can send you immediate alerts. You can configure real-time notifications via your preferred channels (Email, Slack, Microsoft Teams, or custom webhooks) for various events. This real-time awareness is crucial for catching misconfigurations or shadow IT (unknown assets) before they become major incidents. Additionally, ProjectDiscovery supports internal exposure monitoring: you can run internal network scans (using Nuclei or Naabu for ports) and feed the results into the platform to ensure even behind-the-firewall assets are tracked. In short, exposure management with ProjectDiscovery means you always have an eye on your security posture and can react to new threats or changes as they happen.

Check warning on line 194 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L194

Did you really mean 'misconfigurations'?

Check warning on line 194 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L194

Did you really mean 'Naabu'?

### Infrastructure Security
Modern organizations run on complex infrastructure – multiple cloud providers, containers, on-prem networks, etc. ProjectDiscovery helps with **infrastructure security** by scanning your cloud and network environments for misconfigurations and risks. Through its integrations (and tools like Cloudlist), ProjectDiscovery Cloud can enumerate assets from **AWS, GCP, Azure, and others**, identifying things like misconfigured S3 buckets, public-facing VMs, or open network ports. For example, you can connect your AWS account and automatically retrieve a list of IPs, hostnames, and services you have, then have Nuclei scan them for known cloud-specific vulnerabilities. The platform's built-in port scanner (powered by Naabu) can check all your asset IPs for open ports (1-65535) to uncover services you might not realize are exposed. On the CLI side, you can similarly use Naabu for port scanning and feed those results into Nuclei or other tools for deeper analysis. Importantly, ProjectDiscovery also supports scanning internal infrastructure by letting you run scans within your network and upload the results to the cloud platform. This means even if certain systems aren't reachable from the outside, you can still include them in your security assessment. **Infrastructure security** use cases include checking your cloud accounts for open admin ports, ensuring no dev database is inadvertently open to the internet, and verifying that all your critical services are configured securely. ProjectDiscovery provides the tools to automate these checks across your entire tech stack.

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'misconfigurations'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'Cloudlist'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'misconfigured'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'VMs'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'IPs'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'hostnames'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'Naabu'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'IPs'?

Check warning on line 197 in quickstart/index.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

quickstart/index.mdx#L197

Did you really mean 'Naabu'?

## Automation & Integration

Expand Down
14 changes: 0 additions & 14 deletions style.css
Original file line number Diff line number Diff line change
Expand Up @@ -37,20 +37,6 @@ html[class~="dark"] .section-title {
color: rgba(255, 255, 255, 0.7);
}

nav ul li:nth-child(2) a {
display: block;
padding: 8px;
line-height: 18px;
border-radius: 8px;
background: #6366f1;
border: 1px solid #7e7fff;
transition: all 0.3s ease;
}

nav ul li:nth-child(2) a:hover {
background: #4d4fc4;
color: white !important;
}

/* Custom search button styling */
.search-button {
Expand Down
Loading