Penetration Testing: Re: Scanning tool that will track and report diffs

["R. DuFresne" <dufresne () sysinfo com>]

look at kaminski's new scanrand2, it can push output in pure sql into a db
of choice.

Thanks,

Ron DuFresne

On Wed, 25 Feb 2004, Ben Nelson wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I'm looking for a scanning tool that I can run on a regular basis which
> will: track all results in a database (optional) and report differences
> between scan runs (primary functionality I'm looking for).
>
> I started down the road of writing a python wrapper for nmap which used
> nmap's XML result output to plug into a MySQL database.  But, I thought
> that this has got to be something that a lot of network auditors have a
> need for; which is usually a good indication that there may be a tool
> that already does it.
>
> Another bit of functionality that I think would be pretty useful is the
> ability to 'base-line' a set of systems and then notify when they
> deviate from this baseline.
>
> Any suggestions?
>
> - --Ben
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
>
> iD8DBQFAPR843cL8qXKvzcwRAtvkAJ4zkrFWiDLlaLbFrvohI4IkKAwQ8ACgu1Ng
> J5iMid2wbOqd02/4DuvKFkk=
> =5as/
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!


---------------------------------------------------------------------------
----------------------------------------------------------------------------