Automating Vulnerability Scans with Python and ProjectDiscovery Tools

How to combine subfinder, httpx, naabu, and nuclei into one streamlined script that scans everything and generates clean reports

Not a medium member click here

Image generated by AI

Manually running security scans is fine for quick checks, but it doesn’t scale. It’s slow, inconsistent, and the results pile up in messy text files. A better approach is needed — one that automates the entire workflow, from subdomain discovery and port scanning to vulnerability detection, and generates a clean report with a single command.

The Toolkit: Our Open-Source Arsenal

Our script is a wrapper that intelligently combines three fantastic tools from the team at ProjectDiscovery:

1. subfinder : A fast subdomain enumeration tool from ProjectDiscovery that gathers subdomains using passive sources like search engines, DNS datasets, and APIs.
2. httpx: A fast and multi-purpose HTTP toolkit. We use it for two key tasks: discovering live web servers on common ports and fingerprinting the technologies they use (e.g., WordPress, Apache, etc.).
3. naabu: A lightning-fast port scanner. We use it to perform a comprehensive scan of all 65,535 TCP ports to find every open service, not just web servers.