Method scan

core/scanner_engine.py:444–605

Execute the complete scanning process. Args: enable_recon: Enable reconnaissance phase full_scan: Enable all vulnerability tests quick_scan: Run only basic tests scan_subdomains: Enable subdomain discovery and scanning (experi

(
        self,
        enable_recon: bool = False,
        full_scan: bool = False,
        quick_scan: bool = False,
        scan_subdomains: bool = False
    )

        return recon_results
    
    def scan(
        self,
        enable_recon: bool = False,
        full_scan: bool = False,
        quick_scan: bool = False,
        scan_subdomains: bool = False
    ) -> Dict:
        """
        Execute the complete scanning process.
        
        Args:
            enable_recon: Enable reconnaissance phase
            full_scan: Enable all vulnerability tests
            quick_scan: Run only basic tests
            scan_subdomains: Enable subdomain discovery and scanning (experimental)
            
        Returns:
            Dictionary containing scan results
        """
        self.start_time = datetime.now()
        self.state_manager.set_phase(PentestPhase.INITIALIZATION)
        
        results = {
            'target': self.target_url,
            'start_time': self.start_time.isoformat(),
            'config': {
                'depth': self.depth,
                'threads': self.threads,
                'recon_enabled': enable_recon,
                'scan_mode': 'full' if full_scan else 'quick' if quick_scan else 'standard',
                'browser_enabled': self.config.get('advanced', {}).get('enable_javascript_rendering', False),
                'screenshot_enabled': self.config.get('advanced', {}).get('screenshot_enabled', False),
                'subdomain_scanning': scan_subdomains
            }
        }
        
        # Phase 1: Reconnaissance (optional)
        recon_data = None
        if enable_recon:
            recon_data = self.run_reconnaissance()
            results['reconnaissance'] = recon_data
        
        # Phase 1.5: Subdomain Discovery & Scanning (experimental)
        if scan_subdomains:
            subdomain_results = self.subdomain_scanner.discover_and_scan(
                self.target_url,
                aggressive=self.config.get('experimental', {}).get('aggressive_subdomain_enum', True)
            )
            results['subdomain_scan'] = subdomain_results
            
            # Aggregate subdomain vulnerabilities into main results
            for subdomain, sub_result in subdomain_results.get('scan_results', {}).items():
                for vuln in sub_result.get('vulnerabilities', []):
                    # Mark as subdomain vulnerability
                    vuln['source'] = 'subdomain'
                    vuln['subdomain'] = subdomain

                    # Enrich with CVE data if enabled