Re: nmap..... via web

["Holger Heimann" <hh () it-sec de>]

> My to concerns are, What security problems should I expect.. if any..
> The site would be restricted via htaccess, for the fact it is a possible
> DOS that ppl could do.


Think about the people being scanned with your service also!
Be careful to restrict the portscan to a few ports. Not more as absolutely
neccessary for OS-recognition.
Do not give script-kiddies and other people the platform to do portscans on
arbituary machines on the internet. It's no good style and it will fall back
to you when people start scanning other computers through your machine.

We offer a WWW-Server detection and refrained from additional OS guessing
for the target, because we did not want to have other peoples computers
penetrated too much by the service. Remind that portscans are usualy
considered as an unfriendly act.

Regards,
Holger/it-sec.de