{% extends "base.html" %} {% block title %}Discovery - Hermetic Suite{% endblock %} {% block content %}

🏠 Internal Discovery

Scan internal CIDR ranges to discover hosts within your VPC using nmap.

Leave empty to use default ranges
{% if has_ssh_key %}
{% else %}
💡 Add an SSH key to enable hostname lookup via SSH
{% endif %}

🌐 External Discovery

Discover externally-accessible hosts via DNS enumeration.

Enter your domain names to enumerate subdomains and resolve IPs

Discovery Methods

Internal Network Scan

  • Ping sweep to find live hosts
  • ARP discovery on local subnet
  • Optional: SSH hostname lookup
  • MAC address collection

External DNS Enumeration

  • A/AAAA record resolution
  • Common subdomain enumeration
  • MX and NS record lookup
  • Reverse DNS for IP ranges
{% endblock %}