Penetration Testing: RE: Scanning tool that will track and report diffs

["Aditya, ALD [Aditya Lalit Deshmukh]" <aditya.deshmukh () online gateway technolabs net>]

> I'm looking for a scanning tool that I can run on a regular basis which
> will: track all results in a database (optional) and report differences
> between scan runs (primary functionality I'm looking for).
this looks like exactly like nessus on unix or gfi languard for windows, nessus is freeware and updated frequently but 
will require unix host to setup, since you have coded in python i think that you are using unix you will find this 
system very good for baselining and other things

gfi langurard is shareware can be used for one month free of cost but it has the base line freature built in for the 
you will have to USD$ 99 to use. good but the nessus report | diff | viewer is a more flexible approach.

> Another bit of functionality that I think would be pretty useful is the
> ability to 'base-line' a set of systems and then notify when they
> deviate from this baseline.
maybe something like if you network is fiarly stable ( not dhcp! ) 

cat "nessus report" | diff | email 


-aditya


---------------------------------------------------------------------------
----------------------------------------------------------------------------