18 lines
522 B
YAML
18 lines
522 B
YAML
# recon-triage scope file — AUTHORIZED TARGETS ONLY.
|
|
#
|
|
# Only assets listed here are touched. Anything resolving outside these rules is
|
|
# dropped with a logged warning and never scanned. out_of_scope takes precedence.
|
|
#
|
|
# Domain rules match subdomains: "example.com" also covers "api.example.com".
|
|
|
|
in_scope_domains:
|
|
- example.com
|
|
|
|
in_scope_cidrs:
|
|
- 93.184.216.0/24
|
|
|
|
out_of_scope:
|
|
# Exclude specific hosts or sub-ranges even if they fall under an in-scope rule.
|
|
- internal-only.example.com
|
|
- 93.184.216.200/30
|