Re: nmap idea

[Ron <ron () skullsecurity net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey Eugene,

I don't speak for Nmap or anything, but I have a question about your proposal: how does Nmap get the sourcecode to 
applications, and why would you use Nmap (as opposed to other static analysis tools)? 

It seems to me that, despite Nmap's growing number of uses, this falls outside of what Nmap can really excel at. 

Ron

On Wed, 30 Mar 2011 21:56:47 +0300 Eugene Melnichenko <my.email.eugene () gmail com> wrote:
> Hi guys, my name is Eugene.
>
> Before you apply, I decided to write you here.
>
> I have an idea, i do not know how much it will be interesting you, but
> still.
>
> The idea is that would make the extensions for nmap.
>
> This expansion will identify potential vulnerabilities in software, by
> scanning the source code.
>
> All information will be stored in the database, in which is recorded
> information about the static safety rules (API functions, database
> errors in the source code, dangerous features and etc.).
>
> The database can be collected for the popular programming
> languages ​​(C / C
> + +, Java, C #).
>
> *P.S: *
>
> If you're interested this I can write a more detailed.
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAk2Y1O0ACgkQ2t2zxlt4g/TVAwCgznHX/Mthr5bRdNN+M+wtXltP
S7AAniLmuf2cHan9aw+cFYwfYnmwW7qc
=G2e5
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/