google/tsunami-security-scanner
Tsunami Security Scanner
Tsunami Security Scanner is a network vulnerability scanner and security auditor designed to identify high-severity flaws across network assets. It functions as an asynchronous security probe engine that utilizes automated probes and specialized detection logic to find critical weaknesses and prioritize remediation efforts.
The project is distinguished by a plugin-based scanning engine, which uses a modular architecture of interchangeable detection plugins to identify vulnerabilities. This extensibility allows for the development and integration of custom security plugins to expand the variety of detectable flaws.
The system covers a broad range of network security auditing capabilities, including the coordination of automated testing workflows and the operation of callback servers to capture out-of-band network responses. It also includes management features for SSL trust, network timeout configurations, and the definition of scanning workflows.
Features
- Network Security Auditing - Provides a specialized engine for scanning network environments to identify critical weaknesses and report vulnerabilities.
- Plugin Execution Engines - Uses a modular plugin execution engine to run specialized logic for identifying various network security vulnerabilities.
- Network Scanning - Performs network scanning using specialized plugins to identify high-severity security flaws.
- Network Vulnerability Scanning - Uses automated probes and specialized detection logic to find high-severity security flaws across network assets.
- Vulnerability Scanning - Scans network assets to discover and identify high-severity security weaknesses and vulnerabilities.
- Security Testing Pipelines - Coordinates a structured sequence of network operations and callback servers to identify security flaws with high confidence.
- Asynchronous Security Auditors - Employs an event-driven asynchronous framework to perform security audits and handle probe responses.
- Network Scanners - Probes network address spaces using automated probes and specialized detection logic to find vulnerabilities.
- Detection Plugin Interfaces - Provides a standardized set of APIs that allow developers to integrate new vulnerability detection logic into the core engine.
- Network Vulnerability Scanning - Provides a specialized engine to scan networks and identify high-severity security vulnerabilities using automated probes.
- Security Scanner Plugins - Implements a modular architecture that allows the integration of custom detection plugins to expand scanning capabilities.
- Vulnerability Scanners - Automates the detection of high-severity security flaws across network infrastructure.
- Plugin-Based Scanners - Provides an extensible plugin system to add new vulnerability identification capabilities to the scanning engine.
- Detection Plugin Interfaces - Provides common APIs that allow third-party developers to integrate new vulnerability detection logic.
- Network Reconnaissance Tools - Scans networks to identify active services and critical security flaws to prioritize remediation.
- Out-of-Band Testing - Implements a dedicated callback server to detect blind vulnerabilities by capturing asynchronous out-of-band network responses.
- Vulnerability Scanning Workflows - Coordinates a structured sequence of network operations to ensure consistent vulnerability identification across target environments.
- Modular Scanning Engines - Utilizes a modular engine that executes interchangeable detection plugins for vulnerability identification.
- Trust Configuration - Provides configurable SSL trust settings to maintain connectivity with targets using self-signed or expired certificates.
- Out-of-Band Callback Servers - Operates dedicated callback servers to capture and process out-of-band network responses triggered by security probes.
- Socket Networking - Implements strict connection and read timeouts on network sockets to prevent scanner hangs.
- Transport Timeouts - Allows definition of low-level transport timeouts to prevent processes from hanging during remote server failures.
- Certificate Trust Managers - Includes controls to manage whether the system trusts all security certificates during network connection attempts.
- Vulnerability Reporting - Identifies and reports critical security vulnerabilities in network environments using automated probes.
- Network - Identifies security vulnerabilities across target networks to facilitate system hardening and risk mitigation.
- Plugin Extenders - Provides interfaces for developing specialized plugins that augment the scanner's detection capabilities.
- Third-Party Plugins - Supports the integration of third-party plugins to increase the variety of detectable security vulnerabilities.
- Security References - Automated network security scanning tool.
- Application Security - Extensible network scanner for detecting high-severity vulnerabilities.
- Infrastructure Scanners - Extensible network security scanner for detecting high-severity vulnerabilities.
- Network Security Monitoring - Extensible network scanner for detecting high-severity vulnerabilities.
- Network Security Tools - Extensible scanner for detecting high-severity network vulnerabilities.
- Security and Vulnerability Scanning - Extensible network security scanner for detecting high-severity vulnerabilities.
- Security Tools - General purpose network security scanner with extensible plugins.
