Skip to content

Uncover

Purpose

Uncover queries external search providers and emits passive service candidates.

Plugin Information

Plugin ID: uncover

Category: Experimental

Plugin Type: recon

Execution: passive CLI recon using external providers

Default State: disabled

Default Profiles:

  • Not included in the default scan_profiles configuration.

Input Scope

Accepted asset types:

  • domain
  • subdomain
  • ip

Required metadata:

  • Provider credentials may be required by the Uncover CLI depending on configured providers.

Produces targets:

  • Query string built as <target> OR <target> and passed with -q.

Output

Creates assets:

  • service

Creates vulnerabilities:

  • None

May enrich:

  • Service assets with IP/host and port metadata.

Metadata:

  • ip: host or IP from provider output.
  • port: provider-reported port.
  • source: uncover.

Graph Relations

The worker derives service exposure edges from service metadata:

ip -> exposes -> service

Files / Artifacts

Produces:

  • None

Dependencies

Required binary: uncover

Required installer entry: tools.uncover

Operational requirements:

  • Provider API keys may be required outside this application configuration.

Command model:

uncover -json -silent -q "<target> OR <target>"

Example Flow

domain or ip
  -> uncover
service

Notes

Experimental and disabled by default. The installer entry currently notes that release URL and provider API key configuration should be verified before enabling.