Re: Know such a web's server tool?

chaitan_at_nullcube.com
Date: 07/17/03

  • Next message: Ty Bodell: "Re: Know such a web's server tool?" 
    Date: Fri, 18 Jul 2003 02:15:09 +1000
To: pen-test@securityfocus.com

    - I think it gets mentioned everyday on this list but try "nessus".
      It has a batch mode for doing exactly what you want.
      
    - "Nmap" is useful is useful for doing broad scans and compiling target service
      lists for other tools to further explore.

    - You may have to glue it together with some Python/Perl/Shell etc.

    On Thu, Jul 17, 2003 at 11:40:17AM +0000, MARTIN M. B?noni wrote:
    > Hi list!
    >
    > I am currently writing an application which will allow to find out all
    > (well the maximum of them! :) ) the servers on a network. Here is how it
    > works:
    > 1- I feed it with a list of targets (command-line or file): CIDR subnets,
    > hostnames, IP address(es),..
    > 2- I specify a type of scan: looking for FTP, HTTP, POP, ... servers /
    > intrusive scan or not / ....
    > 3- It tries to find them out.
    > 4- Gets its OS and vulnerabilities. And if desired, it will try to breack
    > down the systems using the found vulnerabilities.
    > 5- Creates a simple HTML page with the results.
    >
    > I have been wandering around Internet, and I could not find any tool like
    > that (well doing all these features). So, if you know such a tool, could
    > you tell me about it? If you have any idea/clue/help, feel free to mail me!
    >
    > Cheers!
    >
    > B?noni-
    >

    ---------------------------------------------------------------------------
    Your network Firewall and IDS products do not prevent Web application
    exploits - the most common form of online attack - resulting in Web
    defacement, data theft, sabotage and fraud.

    KaVaDo is the first and only company that provides a complete and an
    integrated suite of Web application security products, allowing you to
    assess your entire environment, automatically set positive security
    policies and maintain it without compromising business performance.

    For more information on KaVaDo and to download a FREE white paper on Web
    applications - security policy automation, please visit:
    http://www.kavado.com/ad.htm
    ----------------------------------------------------------------------------

  • Next message: Ty Bodell: "Re: Know such a web's server tool?"

    Relevant Pages

    • RE: PAWS security vulnerability
      ... FreeBSD security list" isn't grammatically correct. ... "I told you to post the patch and info to the appropriate FreeBSD security ... "...This point and others are often discussed on the mailing lists, ...
      (freebsd-questions)
    • May I have permission to travel???????
      ... ""Homeland Security Tightens Grip on International Travel ... The Department of Homeland Security proposed new rules back in July ... These lists ... Instead of providing a passenger manifest after departure as now ...
      (alt.true-crime)
    • RE: PAWS security vulnerability
      ... You STILL haven't taken this to the correct security mailing list, ... > FreeBSD security ... >>lists, and you aren't the least bit interested in doing what ... >>appropriate forum to post the patch, ...
      (freebsd-questions)
    • [NEWS] Cisco IOS Stack Group Bidding Protocol Crafted Packet DoS
      ... Get your security news from a reliable source. ... The SGBP implementation provided by the Cisco Internetwork Operating ... This vulnerability affects any device that runs Cisco IOS and has enabled ... to apply Access Control Lists to prevent untrusted hosts from ...
      (Securiteam)
    • [Full-Disclosure] Was: Full Disclosure = Exploit Release - No disclosure No Fix
      ... For the bigger vendors, statistics will iron out mistakes - and ... Would you write a script for that - unlikely. ... 588 new vulnerabilities were posted on major lists. ... To this list of unanswereable questions I could add the ratio of security ...
      (Full-Disclosure)
    • Quantcast