Re: nmap..... via web

>Make the CGI a perl script that is running SUID perl so it runs as
>root. Make the perl check to see where they are coming from and that
>the host they want to scan is inside your network before allowing to
>continue with the scan.
>
>That would be a bit risky if the script isn't written properly, but it
>should be fairly easy to do.

risky, yes. especially with the buffer overflow problems perl has had
in the past. my recommendation would be to make a suid copy of nmap
that *only* the web server id can get to. and hack it (nmap) so that
only the web server id is allowed to run it. simple enough to do.

        if (getuid() != webserveruid) exit(1);

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior_at_daemon.org             * "ah!  i see you have the internet
twofsonet_at_graffiti.com (Andrew Brown)                that goes *ping*!"
andrew_at_crossbar.com       * "information is power -- share the wealth."