Sign inSign up

biwis/te-flan-scan

By biwis

•Updated about 3 years ago

flan-scan, flan, vulnerability scanner

Image
Networking
Security
0

448

biwis/te-flan-scan repository overview

⁠te-flan-scan

te-flan-scan is a lightweight network vulnerability scanner (based on Cloudflare Flan https://github.com/cloudflare/flan⁠). With te-flan-scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network.

te-flan-scan is a wrapper around Nmap and a vulnerability script that turns Nmap into a complete network vulnerability scanner. te-flan-scan makes it easy to deploy Nmap locally in a container and send the results to the cloud. te-flan-scan now has the ability to run scheduled scans (in cron format)

⁠Nmap default parameter in container

By default te-flan-scan runs the following Nmap command:

$ nmap -sV -oX /shared/xml_files -oN - -v1 $@ --script=vulners/vulners.nse <ip-address>

To change nmap parameters you can use -e arg="<parametrs>". For example:

docker run --rm --cap-drop=all --cap-add=NET_RAW --name te-flan-scan -v "$PWD/shared:/shared:Z" -e format="html" -e arg="-p1-65535"  biwis/te-flan-scan

⁠Getting Started

  1. Pull this image:
docker pull biwis/te-flan-scan
  1. Run docker container.
  • Example of scanning and result report in html :
docker run --rm --cap-drop=all --cap-add=NET_RAW --name te-flan-scan -v "$PWD/shared:/shared:Z" -e format="html"  biwis/te-flan-scan
  1. Run Nmap Custom Option
docker run --rm --cap-drop=all --cap-add=NET_RAW --name te-flan-scan -v "$PWD/shared:/shared:Z" -e format="html" -e arg="-p1-65535"  biwis/te-flan-scan

this is equivalent to running the command in the container

nmap -sV -oX /shared/xml_files -oN - -v1 -p1-65535 --script=vulners/vulners.nse <ip-address>
  1. Example of running a task in a container on a schedule (cron statement)
docker run -d --cap-drop=all --cap-add=NET_RAW --name te-flan-scan -v "$PWD/shared:/shared:Z" -v "/etc/localtime:/etc/localtime:ro" -v "/etc/timezone:/etc/timezone:ro" -e format="html" -e arg="-p1-65535" -e cron_time="00 5 * * 1"  biwis/te-flan-scan
  • Example docker compose file
version: "3.9"
services:
  te-flan-scan:
    image: "biwis/te-flan-scan:latest"
    volumes:
      - "./shared:/shared:Z"
      - "/etc/timezone:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
    environment:
      cron_time: "00 5 * * 1"
      arg: "-p1-65535"
      format: "html"
    cap_drop:
      - all
    cap_add:
      - NET_RAW
    restart: on-failure

⁠Default value

These values are in run.sh and sheduler.py of this image

format="tex" # file extension for the report
cron_time="" # crond scheduling scanning
command="/run.sh" #run command in this container
arg="" #argument for the command in this container

Tag summary

Content type

Image

Digest

sha256:16a9527a4…

Size

41.2 MB

Last updated

about 3 years ago

docker pull biwis/te-flan-scan