Re: Distributed Vulnerability Scanners

[Preston <p () altmode com>]

Here is another shameless plug, but for an open-source product!

Gherkin is a free web-enabled, multi-threaded, centralized security scan
manager incorporating Nessus vulnerability scanning, dns and nmb lookup
host resolving, nmap fingerprinting and scanning, and customized
traceroute-based network node detection with all the output stored in a
normalized Postgres database.

We are currently enhancing this 0.1 release to take advantage of
the scheduled threaded scanning processes to support distributed
deployment.

www.altmode.com/gherkin

p




On Wednesday 05 March 2003 2:56 pm, Talisker wrote:
> Hi
> I'm looking for vulnerability scanners that will do their business
> remotely, especially useful for distributed networks with low bandwidth
or
> managed services.
>
> I only know of 3:
> Lightning Proxy
> http://www.tenablesecurity.com/proxy.html
>
> Nessus
> http://www.nessus.org/features.html
>
> Retina
> http://www.eeye.com/html/Products/Retina/index.html
>
> Does anyone know of any more, I would suggest that this excludes web
based
> scanners like shieldsup etc as they don't resolve the bandwidth issue,
was
> the problem with shieldsup (demonstrated at BlackHat Europe 2001) ever
> resolved whereby you could use it to scan anyone you wished??
>
> Anyway the list when completed will appear here, though it's not on the
> site navigation yet.
> http://www.networkintrusion.co.uk/dist.htm
>
> Sorry about the amount of posts of late but I have been on vacation and
> therefore have time to read my email.
>
> take care
> -andy
> Taliskers Network Security Tools
> http://www.networkintrusion.co.uk



----------------------------------------------------------------------------

Are your vulnerability scans producing just another report?
Manage the entire remediation process with StillSecure VAM's
Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html