适用对象
使用范围明确的被动检查来补充分诊和调查，而不是替代授权测试或人工审查。
你将获得什么
发现公开网站上暴露的软件、高风险配置和已知受影响版本。每项结果都会说明检查了什么、为何匹配以及证据的可信程度。
同步RESTMCPSDK交互式工具
适合选择此产品的场景
适合选择此产品的场景
需要被动的暴露版本和配置证据时选择。它不会利用目标，也不证明网站没有漏洞。
你将获得什么
发现公开网站上暴露的软件、高风险配置和已知受影响版本。每项结果都会说明检查了什么、为何匹配以及证据的可信程度。
端点
集成前，请查看支持的操作、输入、输出、执行模式和响应限制。
积分和身份验证
8-12 需要身份验证。有关确切费用和按项计费，请查看操作参考。
操作示例
使用文档化的操作来收集、评估、补充、验证、比较、保护或监测公开证据。
GET
/v1/vulnerabilities
查询参数
| 参数 | 类型 | 必需 |
|---|---|---|
| url | string | 可选 |
| domain | string | 可选 |
| mode |
string
允许的值
standarddeep
默认值
standard
|
可选 |
响应字段
| 字段 | 类型 |
|---|---|
target |
object |
target.requested_url |
string |
target.final_url |
string |
target.hostname |
string |
scan |
object |
scan.mode |
string |
scan.status |
string |
scan.checked_at |
string |
scan.duration_ms |
integer |
scan.disclaimer |
string |
summary |
object |
summary.posture |
string |
summary.risk_level |
string |
summary.finding_count |
integer |
summary.version_affected_count |
integer |
summary.misconfiguration_count |
integer |
summary.urgent_count |
integer |
summary.severity_counts |
object |
findings[] |
object[] |
findings[] |
object |
findings[].fingerprint |
string |
findings[].classification |
string |
findings[].severity |
string |
findings[].priority |
string |
findings[].title |
string |
findings[].summary |
string |
findings[].component |
object |
findings[].component.technology_id |
string |
findings[].component.name |
string |
findings[].component.detected_version |
string |
findings[].component.version_kind |
string |
findings[].component.confidence |
string |
findings[].component.confidence_score |
integer |
findings[].component.ecosystem |
string |
findings[].component.package |
string |
findings[].component.purl |
string |
findings[].advisory |
object |
findings[].advisory.id |
string |
findings[].advisory.aliases[] |
string[] |
findings[].advisory.cves[] |
string[] |
findings[].advisory.published_at |
string | null |
findings[].advisory.modified_at |
string | null |
findings[].advisory.cvss[] |
object[] |
findings[].advisory.cvss[] |
object |
findings[].advisory.cvss[].type |
string |
findings[].advisory.cvss[].vector |
string |
findings[].advisory.fixed_versions[] |
string[] |
findings[].advisory.affected_ranges[] |
object[] |
findings[].advisory.affected_ranges[] |
object |
findings[].advisory.references[] |
string[] |
findings[].exploitation |
object |
findings[].exploitation.cisa_kev |
boolean | null |
findings[].exploitation.kev_added_at |
string | null |
findings[].exploitation.kev_required_action |
string | null |
findings[].exploitation.known_ransomware_use |
string | null |
findings[].exploitation.epss_probability |
number | null |
findings[].exploitation.epss_percentile |
number | null |
findings[].exploitation.epss_date |
string | null |
findings[].evidence |
object |
findings[].evidence.confidence |
string |
findings[].evidence.observed[] |
string[] |
findings[].evidence.limitations[] |
string[] |
findings[].remediation |
object |
findings[].remediation.summary |
string |
findings[].remediation.fixed_versions[] |
string[] |
findings[].sources[] |
string[] |
components[] |
object[] |
components[] |
object |
components[].technology_id |
string |
components[].name |
string |
components[].detected_version |
string | null |
components[].version_kind |
string | null |
components[].confidence |
string |
components[].advisory_status |
string |
components[].matched_advisories |
integer |
coverage |
object |
coverage.target_response |
string |
coverage.technology_detection |
string |
coverage.package_advisories |
string |
coverage.known_exploitation |
string |
coverage.exploitation_probability |
string |
coverage.detected_components |
integer |
coverage.versioned_components |
integer |
coverage.advisory_eligible_components |
integer |
coverage.advisory_checked_components |
integer |
coverage.advisory_deferred_components |
integer |
coverage.advisory_query_limit |
integer |
coverage.relay_used |
boolean |
coverage.limitations[] |
string[] |
sources[] |
object[] |
sources[] |
object |
sources[].id |
string |
sources[].name |
string |
sources[].owner |
string |
sources[].url |
string |
sources[].status |
string |
sources[].retrieved_at |
string | null |
sources[].cache_hit |
boolean |
sources[].expected_freshness |
string |
sources[].fallback_behavior |
string |
sources[].cost |
string |
_meta |
object |
请求示例
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/vulnerabilities?url=https%3A%2F%2Fexample.com&domain=example.com&mode=standard"响应示例
{
"target": {
"requested_url": "https://example.com",
"final_url": "https://example.com",
"hostname": "example.com"
},
"scan": {
"mode": "standard",
"status": "complete",
"checked_at": "2026-08-27T12:00:00Z",
"duration_ms": 1,
"disclaimer": "example"
},
"summary": {
"posture": "action_required",
"risk_level": "critical",
"finding_count": 1,
"version_affected_count": 1,
"misconfiguration_count": 1,
"urgent_count": 1,
"severity_counts": {}
},
"findings": [
{
"fingerprint": "example",
"classification": "version_affected",
"severity": "critical",
"priority": "urgent",
"title": "example",
"summary": "example",
"evidence": {
"confidence": "high",
"observed": [
"example"
],
"limitations": [
"example"
]
},
"remediation": {
"summary": "example",
"fixed_versions": [
"example"
]
},
"sources": [
"osv"
],
"component": {
"technology_id": "example",
"name": "example",
"detected_version": "example",
"version_kind": "product",
"confidence": "high",
"confidence_score": 85,
"ecosystem": "example",
"package": "example",
"purl": "https://example.com"
},
"advisory": {
"id": "example-id",
"aliases": [
"example"
],
"cves": [
"example"
],
"published_at": "2026-08-27T12:00:00Z",
"modified_at": "2026-08-27T12:00:00Z",
"cvss": [
{
"type": "domain",
"vector": "example"
}
],
"fixed_versions": [
"example"
],
"affected_ranges": [
{}
],
"references": [
"https://example.com"
]
},
"exploitation": {
"cisa_kev": false,
"kev_added_at": "2026-08-27",
"kev_required_action": "example",
"known_ransomware_use": "example",
"epss_probability": 0.85,
"epss_percentile": 0.5,
"epss_date": "2026-08-27"
}
}
],
"components": [
{
"technology_id": "example",
"name": "example",
"detected_version": "example",
"version_kind": "example",
"confidence": "high",
"advisory_status": "checked",
"matched_advisories": 1
}
],
"coverage": {
"target_response": "example",
"technology_detection": "example",
"package_advisories": "example",
"known_exploitation": "example",
"exploitation_probability": "example",
"detected_components": 1,
"versioned_components": 1,
"advisory_eligible_components": 1,
"advisory_checked_components": 1,
"advisory_deferred_components": 1,
"advisory_query_limit": 1,
"relay_used": false,
"limitations": [
"example"
]
},
"sources": [
{
"id": "example-id",
"name": "example",
"owner": "example",
"url": "https://example.com",
"status": "available",
"retrieved_at": "2026-08-27T12:00:00Z",
"cache_hit": false,
"expected_freshness": "example",
"fallback_behavior": "example",
"cost": "none"
}
],
"_meta": {}
}限制和证据边界
被动分析只观测公开证据，不发送利用漏洞的载荷。
结果描述观测到的公开证据及其来源。
置信度描述所报告观测的证据强度，并不代表对现实实体的确定性。
覆盖范围受文档化输入、预算、来源和响应限制约束。
部分表示部分请求项目或组件已完成，而其他项目或组件未完成。
审核日期：2026-08-22
常见问题
在哪里可以找到 网站漏洞扫描器 的请求和响应参考？
使用 网站漏洞扫描器 的 API 参考来查看参数、响应字段、示例、状态码和支持的操作模式。
应如何解读 网站漏洞扫描器 返回的未知或不完整结果？
未知或部分结果表示无法完全确定所请求的证据。在后续决策中保留结果状态、置信度、新鲜度和限制信息。
网站漏洞扫描器 如何计费？
费用取决于操作和执行模式。有关当前积分费用、身份验证要求和按项规则，请查看端点参考。
