FYI FWIW: I've released version 1.5 of nmap-web, which is a "nifty"
CGI/Perl interface to nmap - some info/screenshots/tarball at:
http://www.komar.org/komar/alek/ -> Misc. Tech Stuff -> nmap-web
Main addition is nmap-web-CLI ... which is a CLI interface to nmap-web ...
which is a web interface to nmap-web! ;-) One might ask haven't we come
full circle here ... this is supplied in case you like the output format
of nmap-web and want a way to run it periodically and compare diffs to see
if anything changed (ala a Tripwire for network ports)
As always, comments/suggestions/etc. appreciated.
alek
P.S. nmap-web has some (very primitive) means of checking for what
version of "stuff" is running at certain ports. For example, it was
REAL easy to identify which of our 1,000+ machines were running POP
services and using an old qpopper (re: recent security advisory) and
then apply appropriate updates.
So I'm real interested/curious in the work that has been discussed
about extending nmap itself to do "smart" probing in order to determine
that not only is a port open, but what exactly is there.
--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to
nmap-hackers-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
Received on Jul 18 2000