Skip to main content

My first scan

Red Kite does not need to be told what to scan, step by step. You give it a starting point, the seed data, and it discovers the rest of your attack surface on its own. This page walks you through your first scan, from an empty project to your first results.

1. Create a project​

A project holds all the resources of a target. Go to Management > Projects, click Create a project and give it a name, for instance the name of your organization.

2. Add your seed data​

The seed data is what you already know about the target: its domain names, its IP addresses and its IP ranges.

Seed dataWhere to add itWhat Red Kite does with it
Domain namesDomains page, Add domainsResolves the domains to IP addresses, then scans the resulting hosts.
IP addressesHosts page, Add hostsScans the host for open ports, identifies the services and the websites.
IP rangesIP Ranges page, Add IP rangesScans the whole range for live hosts and open ports. Ranges are rescanned periodically.

In each dialog, select the project first. For domains and hosts, enter one value per line. For instance:

example.com
shop.example.com
example.net

For IP ranges, fill one entry per range. A range can be described with its first IP and a short mask (ex: /24), a long mask (ex: 255.255.255.0), or its first and last IPs.

What makes good seed data
  • Your main domains and the domains of your brands, products and campaigns.
  • The public IP ranges assigned to your organization, for instance by a regional internet registry or your cloud and hosting providers.
  • Isolated public IPs that you know about, such as VPN gateways or partner connections.

You do not need to add every subdomain: Red Kite will discover them. Adding too much uncertain data, on the other hand, will make the review work harder.

3. Watch Red Kite work​

As soon as the seed data is added, Red Kite starts its automation: each result triggers new jobs, which find new resources, which trigger new jobs, and so on. See Subscriptions to learn how this chain works.

Follow the jobs in Automation > Executions. Each execution shows its status, its logs and its results.

How long does it take?

The first results, such as resolved domains and open ports, usually appear within minutes. A complete picture takes longer: port scans, website screenshots and discovery jobs run in the background, and Red Kite keeps discovering new resources over the following days.

4. Explore the results​

  • The Dashboard gives an overview: the number of resources, the intel and the geolocation of your hosts.
  • Resources > Domains, Hosts, Ports, Websites list everything Red Kite found. The Websites page shows a screenshot of each website.
  • Visualization > Intel lists the issues detected on your attack surface, such as exposed databases or remote access services.

Each resource has a confidence score: Red Kite's estimate of how likely it is to be yours.

Next steps​