Re: pbnj and alternatives

[Jhfjjf Hfdsjj <taser3000 () yahoo com>]

Well it seems like you might wanna check something a bit closer to the nmap family then :) Zenmap is made by the same 
guys and essentially does exactly what youre asking for plus some.



----- Original Message ----
From: Miguel Gonzalez <miguel_3_gonzalez () yahoo es>
To: pen-test () securityfocus com
Sent: Fri, April 2, 2010 7:06:24 AM
Subject: pbnj and alternatives


Dear all,

 I'm testing a tool called pbnj. It performs scans with nmap and store the information in a database that is used for 
comparing previous scans.

 It's not a tool for monitoring like Nagios (which we'll already have). We are not going to coutinously run this script 
(like every 5 minutes) but maybe once a day or week.

They aim is to to keep a baseline of the services that SHOULD BE open in our servers in a database and compare it to 
the scan we perform from time to time. A report should tell us two things:

- If a new port has been open. That way we can be sure that no new ports 
are open without being warned.

- If a port that should be open is closed.


Before reinventing the wheel, I'd like to know if there is any tool like this with better functionality (it's pretty 
basic, a perl script, the reports and the routine scans have to be configured manually).  As I said, essentially 
performs a scan (with nmap) over a range of IPs and stores the results in a database. Then it tells you if a port has 
changed its state (from up to down or viceversa - however I'm digging the code to add a "new" state too).


Any other tool similar to this one with better capabilities?

Thanks,

Miguel




      




------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------


      


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------