Skip to main content
GET
/
v1
/
asset
/
enumerate
/
misconfiguration
List Misconfiguration Findings
curl --request GET \
  --url https://api.projectdiscovery.io/v1/asset/enumerate/misconfiguration \
  --header 'X-API-Key: <api-key>'
{
  "message": "<string>",
  "total_pages": 123,
  "total_results": 123,
  "current_page": 123,
  "data": [
    {
      "id": "<string>",
      "enumeration_id": "<string>",
      "finding_type": "dangling_dns",
      "host": "<string>",
      "severity": "critical",
      "status": "open",
      "event": {},
      "created_at": "2023-12-25",
      "updated_at": "2023-12-25"
    }
  ]
}

Finding Types

TypeDescription
dangling_dnsDNS records pointing to resources that no longer exist, potentially vulnerable to subdomain takeover
origin_exposureBackend origin IPs exposed behind CDN or proxy services

Event Details by Finding Type

The event object contains type-specific details: dangling_dns
FieldDescription
hostThe vulnerable hostname
ipThe dangling IP address
providerCloud provider (e.g., AWS)
origin_exposure
FieldDescription
origin_ipThe exposed origin server IP
providerCDN provider (e.g., CloudFlare)
leaking_hostsHostnames leaking the origin IP

Example Requests

List all misconfigurations

curl -X GET "https://api.projectdiscovery.io/v1/asset/enumerate/misconfiguration?limit=50" \
  -H "X-Api-Key: YOUR_API_KEY"

Filter by finding type

curl -X GET "https://api.projectdiscovery.io/v1/asset/enumerate/misconfiguration?finding_type=dangling_dns" \
  -H "X-Api-Key: YOUR_API_KEY"

Search by host

curl -X GET "https://api.projectdiscovery.io/v1/asset/enumerate/misconfiguration?search=staging.example.com" \
  -H "X-Api-Key: YOUR_API_KEY"

Authorizations

X-API-Key
string
header
required

Headers

X-Team-Id
string

Query Parameters

limit
integer

The numbers of items to return

offset
integer

The number of items to skip before starting to collect the result set

Case-insensitive substring search on the host field

finding_type
enum<string>

Filter by finding type

Available options:
dangling_dns,
origin_exposure

Response

OK

message
string
total_pages
integer
total_results
integer
current_page
integer
data
MisconfigurationResponse · object[]