You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ExploitCraft edited this page May 5, 2026
·
1 revision
Scan Diff
The --diff command compares two report.json files from different scan runs and shows exactly what changed between them. Useful for tracking target changes over time, verifying remediation, and continuous monitoring.
The first argument is the baseline (older scan), the second is the current (newer scan).
What Gets Compared
Category
What is reported
Ports
New open ports / closed ports since baseline
Subdomains
New subdomains discovered / subdomains that disappeared
Vulnerabilities
New findings added / old findings resolved
Technologies
New tech detected / tech no longer present
Service versions
Version changes on existing services
Workflow: Continuous Monitoring
# 1. Baseline scan
reconninja -t example.com -y
# 2. Wait for changes (days/weeks/months)# 3. Run a new scan
reconninja -t example.com -y
# 4. Diff to see what changed
reconninja --diff reports/example.com_20260101_120000/report.json \
reports/example.com_20260320_120000/report.json
Workflow: Verify Remediation
# Before remediation — save the report path
reconninja -t example.com -y
# Note: reports/example.com_20260310_090000/report.json# After client remediates findings
reconninja -t example.com -y
# Note: reports/example.com_20260320_120000/report.json# Confirm findings are resolved
reconninja --diff reports/example.com_20260310_090000/report.json \
reports/example.com_20260320_120000/report.json
