RE: Distributed Vulnerability Scanners

Talisker...

Hey, I am more of an Oban man myself, but I thought that I would chime in here.

I just wrote a whole chapter (Ch3) about this sort of thing in the new Special Ops book, so felt the need to share. As far as distributed scanning, don't forget FoundScan (Foundstone) if your needs are speed and accuracy.

Erik Pace Birkholz
Foundstone, Inc.

Special Ops: Host and Network Security for Microsoft, UNIX and Oracle www.SpecialOpsSecurity.com

-----Original Message-----

From: Talisker [mailto:talisker@networkintrusion.co.uk] Sent: Wednesday, March 05, 2003 2:56 PM
To: pen-test@securityfocus.com
Subject: Distributed Vulnerability Scanners

Hi
I'm looking for vulnerability scanners that will do their business remotely, especially useful for distributed networks with low bandwidth or managed services.

I only know of 3:
Lightning Proxy
http://www.tenablesecurity.com/proxy.html

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Nessus
http://www.nessus.org/features.html

Retina
http://www.eeye.com/html/Products/Retina/index.html

Does anyone know of any more, I would suggest that this excludes web based scanners like shieldsup etc as they don't resolve the bandwidth issue, was the problem with shieldsup (demonstrated at BlackHat Europe 2001) ever resolved whereby you could use it to scan anyone you wished??

Anyway the list when completed will appear here, though it's not on the site navigation yet. http://www.networkintrusion.co.uk/dist.htm

Sorry about the amount of posts of late but I have been on vacation and therefore have time to read my email.

take care
-andy

Taliskers Network Security Tools http://www.networkintrusion.co.uk

Are your vulnerability scans producing just another report? Manage the entire remediation process with StillSecure VAM's Vulnerability Repair Workflow. Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html

Are your vulnerability scans producing just another report? Manage the entire remediation process with StillSecure VAM's Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html Received on Thu Mar 6 18:12:58 2003

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek