WS-Port-Scanner is a Webservice created by the Chair for Network and Data Security from the Ruhr-University Bochum for the integration of NMAP in the SIWECOS Project. The Webservice scans a provided URL for various open ports and potential misconfigurations and responds with a JSON report.
You can also run WS-Port-Scanner with Docker. You can build with:
docker build . -t port-scanner
You can then run it with:
docker run -it --network host port-scanner
The webservice is then reachable under:
http://127.0.0.1:8080/start
The webservice should be up and running and can be called by sending a POST like
{
"url": "google.de",
"dangerLevel": 0,
"callbackurls": [
"http://127.0.0.1:8080"
]
}
to
http://127.0.0.1:8080/WS-Port-Scanner-1.0/start
or
http://127.0.0.1:8080/start
Depending on your application server.
TLS-Scanner uses the concept of "checks" which are performed after it collected configuration information. A check which results in "true" is consideres a non optimal choice and is an indicator for a pentester for a possible problem.
An example output may look like this:
{
"name" : "PORT",
"hasError" : false,
"errorMessage" : null,
"score" : 0,
"tests" : [ {
"name" : "IRC",
"hasError" : false,
"errorMessage" : null,
"score" : 100,
"scoreType" : "success",
"testDetails" : null
}, {
"name" : "MSSQL",
"hasError" : false,
"errorMessage" : null,
"score" : 100,
"scoreType" : "success",
"testDetails" : null
}, {
"name" : "MYSQL",
"hasError" : false,
"errorMessage" : null,
"score" : 0,
"scoreType" : "warning",
"testDetails" : null
}, {
"name" : "RDP",
"hasError" : false,
"errorMessage" : null,
"score" : 100,
"scoreType" : "success",
"testDetails" : null
}, {
"name" : "TELNET",
"hasError" : false,
"errorMessage" : null,
"score" : 100,
"scoreType" : "hidden",
"testDetails" : null
}]
}| Check | Meaning |
|---|---|
| TELNET | Checks if the port for Telnet is open |
| IRC | Checks if the port for IRC is open |
| RDP | Checks if the port for RDP is open |
| MSSQL | Checks if the port for MS-SQL is open |
| MYSQL | Checks if the port for MY-SQL is open |
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent