Skip to content
This repository was archived by the owner on Mar 23, 2026. It is now read-only.

config: update config and add more scans#115

Open
ikstream wants to merge 2 commits into4elta:developfrom
ikstream:dev
Open

config: update config and add more scans#115
ikstream wants to merge 2 commits into4elta:developfrom
ikstream:dev

Conversation

@ikstream
Copy link
Copy Markdown
Contributor

@ikstream ikstream commented Nov 4, 2025

This PR will add additional scans, especially useful for internal penetrationtests and exposed ports during external tests.

Signed-off-by: ikstream <stefan.venz@protonmail.com>
Copy link
Copy Markdown
Owner

@4elta 4elta left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for your contribution.
please have a look at my comments 🙏

name = 'nikto'
transport_protocol = 'tcp'
command = 'nikto -ask no -Cgidirs all -host {hostname} -port {port} -nointeractive -Format json -output "{result_file}.json" 2>&1 | tee "{result_file}.log"'
command = '#nikto -ask no -Cgidirs all -host {hostname} -port {port} -nointeractive -Format json -output "{result_file}.json" 2>&1 | tee "{result_file}.log"'
Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i like that you "disabled" Nikto again, after we've enabled it not so long ago 😁
perhaps, it's better to move it to config/scanner/additional.toml (enabled).

[[services.scans]]
name = 'nmap'
command = 'nmap -Pn -sV -p {port} --script="banner,smtp* and not (brute or broadcast or dos or external or fuzzer)" -oN "{result_file}.log" -oX "{result_file}.xml" {address}'
command = 'nmap -Pn -sV -p {port} --script="banner,smtp* and not (brute or dos or exploit)" -oN "{result_file}.log" -oX "{result_file}.xml" {address}'
Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why did you remove the external filter from the SMTP script scan?
for example, smtp-open-relay would send mail to nmap.scanme.org.

@4elta
Copy link
Copy Markdown
Owner

4elta commented Nov 5, 2025

i found the services in /usr/share/nmap/nmap-service-probes.
sorry for the noise.

4elta added a commit that referenced this pull request Nov 10, 2025
include `rmg`, see #115
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants