Nmap Development mailing list archives

Re: Time for Nmap SoC! Project ideas wanted.


From: "Eddie Bell" <ejlbell () gmail com>
Date: Wed, 12 Mar 2008 10:25:04 +0000

One vote for the testing framework. I think it will help us catch a
bunch of minor bugs. I know with traceroute there have been a couple
of occasions where simple tests would have caught silly bugs that
surfaced due to changes in nmap.

 - eddie

On 12/03/2008, Fyodor <fyodor () insecure org> wrote:
Hi All.  I'm happy to report that SoC time is coming up again, and now
 is the time to determine what projects to sponsor!  You may recall
 that we have had great results from the Google Summer of Code program
 in the past three years:
 K
 2005 successes: http://slashdot.org/comments.pl?sid=183143&cid=15133184
 2006 successes: http://seclists.org/nmap-dev/2007/q1/0235.html
 2007 successes: http://seclists.org/nmap-dev/2007/q4/0024.html

 And I'm hoping 2008 will be even better!  But for students to achieve
 great results, we need to give them great things to do.  If there is
 anything you have particularly wanted in Nmap or related tools, now is
 your chance to speak up and potentially get it sponsored.  Here are some ideas I've had:

 o Zenmap developer to continue to improve and extend Nmap's new cross-platform GUI
  o Anyone here have ideas for what you'd most like to see in Zenmap?
 o Nmap Scripting Engine infrastructure architect to improve the NSE platform
 o Nmap Scripting Engine script developer to write a bunch more scripts
  for us.
   o Anyone have ideas of scripts you'd love to see?
 o Collect top ports data so that we can say things like "scan just the
  100 most common TCP ports".  The feature already exists, we just need
  the data.
 o Add a fixed-rate packet sending mode to ultra_scan() (like what
  UnicornScan and ScanRand offer).

 And of course I always look for "feature creepers" who fix bugs and
 make a bunch of smaller improvements.  In fact some of the tasks above
 would qualify.  I've made a draft "ideas page" here:

 http://nmap.org/GoogleGrants.html

 And here are some other ideas that may be worth adding:

 o A testing framework that could be run (particularly before new
  releases) to insure that things are working properly.  Maybe it could
  even go so far as scan machines such as scanme.nmap.org to make sure
  OS detection works correctly, etc.

 o Performance engineer.  I kinda want to do this myself, but I can't
  devote a whole summer to it, so maybe we could put it up as a task in
  case we find someone great.

 o Hosted Nmap -- an open source CGI system for running Nmap scans
  against your network.

 o Raw-packet IPv6 support so you could do SYN scan, etc.  Does anyone here use IPv6.

 o Windows IPv6 support.  Again, does anyone want this?

 o Embedded Nmap work--Nmap on the OLPC, Nokia Internet Tablets, and similar devices.

 So those are the ideas which come to mind.  Anyone have other ideas,
 or comments/expansions/details on these ones?

 Cheers,
 -F

 _______________________________________________
 Sent through the nmap-dev mailing list
 http://cgi.insecure.org/mailman/listinfo/nmap-dev
 Archived at http://SecLists.Org


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: