Scan Network Services for Misconfigurations

Scan for network service misconfigurations that range from disclosing information and exposing sensitive functionality to enabling complete

Vulnerability Scanning

Created by

mhmdiaa-trickest

Last updated

8/12/2024

Input Parameters

rate-limit · string

Maximum number of requests to send per second per machine

port-details · file · required

JSONLines records of port or network service discovery details from the Scan for Open Ports or Fingerprint Network Services modules

Outputs

findings

Scan Network Services for Misconfigurations

Description

Scan for network service misconfigurations that range from disclosing information and exposing sensitive functionality to enabling complete takeover of an asset.

Features

• Scans for a wide range of misconfiguration scenarios.
• Supports various network protocols.
• Can scan thousands of web servers simulataneously.

Inputs

Required

• port-details: JSONLines records of port or network service discovery details from the “Scan for Open Ports” or “Fingerprint Network Services” modules.

{"hostname": "foo.example.com", "ip_address": "1.2.3.4", "port": 21, "protocol": "ftp", "tls": false, "transport": "tcp", "banner": "220 (vsFTPd 3.0.5)\r\n"}
{"hostname": "bar.example.com", "ip_address": "5.6.7.8", "port": 22, "protocol": "ssh", "tls": false, "transport": "tcp", "banner": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.4\r\n"}

Optional

• rate-limit: Maximum number of requests to send per second per machine (default: 300)

Outputs

• findings: JSONLines records of finding details.

{"finding": "FTP Anonymous Login", "location": "1.2.3.4:21", "severity": "medium", "ip_address": "1.2.3.4", "hostname": "foo.example.com", "domain_name": "example.com", "description": "Anonymous FTP access allows anyone to access your public_ftp folder, allowing unidentified visitors to download (and possibly upload) files on your website. Anonymous FTP creates the potential for a security hole for hackers and is not recommended."}
{"finding": "SSH Password-based Authentication", "location": "5.6.7.8:22", "severity": "info", "ip_address": "5.6.7.8", "hostname": "bar.example.com", "domain_name": "example.com"}

Changelog

• v1.0
  • Initial release