scipag/vulscan
Vulscan
Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify security flaws. It functions as a version-based flaw detector, matching detected software banners against an offline vulnerability database to identify potential security risks without requiring a constant internet connection.
The tool provides mechanisms for refining identification accuracy, including an interactive mode for manual version overriding and configurable matching logic to filter results. It manages security data through a system for loading local datasets and synchronizing vulnerability databases via automated or manual updates.
The project covers network security auditing and flaw identification, producing security audits through a template-based reporting system. This allows for the customization of vulnerability reports using predefined strings and dynamic templates.
Features
- Service Version Matching - Identifies security risks by matching detected service versions against local datasets without requiring an internet connection.
- Nmap NSE Vulnerability Scanning - Leverages Nmap NSE scripts to identify known security flaws and vulnerabilities across network devices.
- Network Vulnerability Scanning - Identifies potential attacker entry points by matching software versions against vulnerability databases.
- Nmap Integration - Integrates with Nmap and the Nmap Scripting Engine for initial network discovery and service fingerprinting.
- Network Security Auditing - Performs structured scans of network services to identify outdated software and critical vulnerabilities.
- Network Service Auditors - Functions as a scanner that analyzes open ports and identifies outdated or vulnerable software versions across a network.
- Version-Based Vulnerability Detection - Matches detected software banners against databases of known affected releases to identify security exploits.
- Nmap-Based - Uses the Nmap Scripting Engine to detect software vulnerabilities by matching service versions against offline databases.
- Offline Vulnerability Analysis - Maintains a local dataset of known security flaws for use in air-gapped or offline environments.
- Vulnerability Report Templates - Uses standardized templates to generate consistent and technical security vulnerability reports.
- Manual Fingerprint Overrides - Provides an interactive mode to manually correct detected software versions for specific ports.
- Manual Version Overrides - Allows users to manually override misidentified software versions to ensure accurate vulnerability matching.
- Customizable Report Templates - Produces detailed reports using custom templates to format discovered vulnerabilities for different stakeholders.
- Vulnerability Database Management - Manages the loading and synchronization of local vulnerability datasets and custom database files.
- Vulnerability Data Synchronization - Provides mechanisms for updating local security definitions from remote vulnerability sources.
- Network and Web Reconnaissance - Advanced vulnerability scanning using Nmap NSE.
- 安全与加固 - Advanced vulnerability scanning using network scripts.
- Web Application Scanning - Network and service-level vulnerability scanner.
