NULLBLOCKS VS THE DIY STACK
You can build this yourself. Here's what that actually costs.
A lot of working hunters and consultants stitch together open-source tools — something like subfinder or amass for subdomain enumeration, httpx for live-host probing, a fingerprinting tool for tech detection, and nuclei for CVE/misconfig checks. It works, and plenty of great researchers run exactly this stack. It also has a real, ongoing cost that's easy to underestimate.
THE HONEST TRADE-OFF
| NullBlocks | DIY stack (subfinder/amass + httpx + nuclei, etc.) | |
|---|---|---|
| Upfront cost | Free report; Graph Explorer is a paid subscription | The tools themselves are free and open source |
| Setup and glue code | None — point it at a domain | You write and maintain the pipeline connecting each tool's output to the next |
| Version-matched CVE correlation | Built in, automatic | Requires your own version-to-CVE mapping logic, or trusting a template library's coverage |
| Dangling-subdomain / takeover detection | Built in, automatic | Possible, but you're writing and maintaining that detection logic yourself |
| Unified report / graph view | One correlated view | You're merging multiple tools' separate outputs yourself |
| Keeping detection rules and CVE data current | Maintained for you | Your responsibility — nuclei templates, CVE feeds, and tool updates all need upkeep |
| Full control and customization | Limited to what the product supports | Total — it's your pipeline, tune it however you want |
WHEN TO USE WHICH
If you want full control over every step, enjoy maintaining tooling, or need something the stack does that we don't (yet) support — build it yourself, it's a genuinely good way to learn recon deeply. If you'd rather skip building and maintaining that pipeline and just get a correlated, continuously-updated report, that's the time NullBlocks saves you.
Worth saying plainly: this isn't a novel idea. NullBlocks' own scanning engine started as a DIY shell-script stack in 2022 before it became a product — we're not pretending we invented recon, just that we've already done the maintenance work so you don't have to.
Try a free NullBlocks report →