Cloudflare about the release of the project's source code , which performs host scanning on the network to detect unpatched vulnerabilities. Flan Scan is an extension of the network security scanner , transforming it into a fully functional tool for identifying vulnerable hosts in large networks. The project code is written in Python and under the BSD license.
Flan Scan makes it easy to find open network ports in the examined network, identify related services and versions of the software in use, and generate a list of vulnerabilities affecting the identified services. After the completion of the process, a report is generated summarizing the identified issues and providing related CVE identifiers classified by severity.
To identify vulnerabilities affecting services, the script included with nmap is used (a more recent version can be downloaded from ), which queries the database . An equivalent result can be achieved with the command:
nmap -sV -oX /shared/xml_files -oN — -v1 —script=scripts/vulners.nse ip-address
‘-sV’ starts service scanning mode, ‘-oX’ specifies the directory for the XML report, ‘-oN’ sets the normal console output mode, -v1 sets the output detail level, ‘—script’ refers to the vulners.nse script for matching identified services with known vulnerabilities.
The tasks performed by Flan Scan primarily focus on simplifying the deployment of a vulnerability scanning system based on nmap in large networks and cloud environments. A script is provided for the quick deployment of an isolated container based on Docker or Kubernetes to run the scan process in the cloud and transfer the results to Google Cloud Storage or Amazon S3. Based on the structured XML report generated by nmap, Flan Scan produces an easily understandable report in LaTeX format that can be converted to PDF.
Source: opennet.ru
