NetScan is a tool designed to assist with external infrastructure and web application assessments. It simplifies the process of identifying valid web pages, detecting a range of vulnerabilities, and presenting the findings in easy-to-understand markdown tables for integration into Secure Portal.
To install this tool the following requirements need to be met:
- Homebrew installed
- Python installed
- Pip installed
- This tool can only be run on a Mac
To install NetScan, follow these steps after downloading it from GitHub:
- Relocate the Installed Folder: Move the downloaded folder to a permanent location on your system. Once set up, the folder cannot be moved as the startup script relies on its current location.
- Open Terminal: Navigate to the folder in your terminal.
- Run Setup Script: Execute
./setup.shin the terminal. This script installs all necessary dependencies and sets up the start script.
To run NetScan, type NetScan in your terminal after installation and setup.
- File Type: Accepts only
.txtfiles. - Usage: Upload a
.txtfile containing the full output of an Nmap scan. NetScan will parse this file and try each IP/port combination for public-facing web pages.
Enter hosts and ports you wish to scan in the domain input field, which accepts both valid domain names and IP addresses.
- Default Ports: Scans ports 80, 443, 8080, and 8443 by default.
- Custom Ports: To specify different ports, use the syntax:
jackmason.com:443jackmason.com:80,443
- Integration: Matches domain names with inputs from an Nmap scan to access pages that require a valid domain name.
Access the settings tab at the top right of the application to activate or deactivate modules. You must press the Close and Save button to update the settings; otherwise, they will not be saved.
- Note: Active scans require explicit permission from the customer.
The Headers module checks the status of the recommended HTTP security headers and identifies any vulnerable HTTP headers.
This module checks for outdated software on a website through the website's terminal. If software is found, the following information is provided:
- Current Version
- Latest Version
- CVEs
This module provides a screenshot of what is on the webpage.
This module evaluates whether the flags are set correctly on the website's cookies.
This module identifies any vulnerable HTTP methods that are allowed (TRACK, TRACE, etc.).
This module checks for the following pages: Admin, Robots, Sitemap.
This module attempts to access 55 sensitive directories and shows the results based on unique pages.
This module pulls back the certificate and highlights any vulnerabilities associated with it.
This module inspects the ciphers and highlights any vulnerable ciphers.
Your feedback is important. If you encounter any issues or have suggestions for improvement, please let me know.