Attack Surface Management
Created bytrickest-mhmdiaa
Last updated7/4/2024

Input Parameters

​
hosts
file
required
List of hostnames/IP addresses/IP ranges
​
ports
string
Comma-separated list of ports to include in the scan
​
exclude-ports
string
Comma-separated list of ports to exclude from the scan
​
port-threshold
string
Exclude hosts with more than this number of open ports (default: 10)

Outputs

port-detailshostname-portsip-ports

​
Scan for Open Ports

​
Description

Scan for the top 1000 most common open ports on a list of hostnames, IP addresses, or IP ranges.

​
Features

  • Outputs in different formats to allow for both detailed queries and also integration with other modules and tools.
  • Capable of processing tens of thousands of hosts simultaneously.
  • Supports hostnames, IP addresses, and IP ranges.
  • Scans all IP addresses associated with a hostname.

​
Inputs

​
Required

  • hosts: a list of hostnames, IP addresses, or IP ranges
dashboard.example.com
1.2.3.4
5.6.7.8/24

​
Optional

  • port-threshold: Exclude hosts with more than this number of open ports (default: 10)
  • ports: Comma-separated list of ports to include in the scan
  • exclude-ports: Comma-separated list of ports to exclude from the scan

​
Outputs

  • port-details: JSONLines records of port discovery details.
{"ip_address": "1.3.3.7", "port": 443, "hostname": "dashboard.example.com"}
{"ip_address": "1.2.3.4", "port": 80}
{"ip_address": "5.6.7.8", "port": 21}
  • hostname-ports: List of open ports formatted as hostname:port
dashboard.example.com:443
  • ip-ports: List of open ports formatted as ip_address:port
1.3.3.7:443
1.2.3.4:80
5.6.7.8:21

​
Changelog

  • v1.0.0
    • Initial release
  • v1.0.1
    • Increase port threshold from 10 to 15
  • v1.1.1
    • Add ports and exclude-ports inputs to allow customization of scanned ports