vuls icon indicating copy to clipboard operation
vuls copied to clipboard

New feature

Open ST2Labs opened this issue 7 years ago • 1 comments

Hi,

It's possible to write plugin ?

I would like to could made network scanning using nmap and match version service results with vulnerability database...

Thanks in advance,

PD: The Scope it's could launch remote scan, using nmap or other tools when we haven't do ssh ...

ST2Labs avatar Jun 24 '18 12:06 ST2Labs

https://github.com/scipag/vulscan A few nse scripts for nmap. Number of others as well.

https://github.com/lair-framework/go-nmap/blob/master/nmap.go

Parsing Bro or Suricata might be additionally useful, as they are often used in open source SIEM products. (Also validation of snort/suricata rules are blocking vulns) Ie Wazuh ossec fork , Selks) The agent or rest api on github well known for Wazuh. Getting io to from that siem or alike I'm shure they'd welcome it.

necrose99 avatar Aug 29 '18 12:08 necrose99