kramse.org

Hi

I have updated the application and Nmap today. The reason for updating is that Nmap 4.85BETA5 has included the script for detecting Conficker. Peter Larsen poked me yesterday, and even if I don't think these ports should be open to thet internet at all - it might help somebody :-)

You can read more about the script and running Nmap at:

• http://insecure.org/

• http://seclists.org/nmap-dev/2009/q1/0869.html

Output from an infected machine should include something like this:

Host script results:
| smb-check-vulns:
| MS08-067: NOT RUN
| Conficker: Likely INFECTED
|_ regsvc DoS: NOT RUN (add –script-args=unsafe=1 to run)
–

otherwise it should report Clean - and of course having the ports closed from the internet will make it unable to detect it.

I have updated quite a few things in the application. The things that you will notice may be:

• Nmap output presented in the webinterface
• Nmap errors are also presented in the webinterface
• When scanning the system sent email to the user, but now Cc: to me also - note however that scan output is not sent to me, and I only look into Nmap output in case of errors!
• In case the Nmap process dies with return code different from 0 an email is sent to the userr and me the admin
• Some more text was added - helpful I hope!

Further updates are behind the scenes:

• Some pathnames for the application was externalized into properties file
• Some parameters like email addresses for the application was externalized into properties file
• Cleanups

I also feel more confident about the system now - it scans, and scans quickly! Most problems have been the accept which I use as a flag, so it gets reset to false whenever a scan starts.

I have also added a buildserver that will rebuild the application whenever I check in code in Subversion.

Hi and welcome to the news section of this website, made as a blog.

It has been a short while since opening up the application at http://miniscan.freescan.dk and it has been fun!

There have been a few problems with stability, which I can assure you are all my fault. Today for instance the file system which contain the database ran full :-(

I deleted some older backups and the service is restored.