nmap-web: quick-n-dirty web interface to nmap
Here is screenshot0, screenshot1 and screenshot2 and here's the tarball for nmap-web-1.71 (2002_07_20) ... VERY simply to install/configure/run ...
nmap-web: A quick-n-dirty Web interface to nmap
nmap at Insecure.Org is a very powerful and easy to use tool to
check which ports are open/responding on your computer. Note that a LOT
more things can be done with it (ex: remote OS fingerprinting) ... check out
the web site for more info. It is LIGHTENING fast ... depending on the number
of ports you scan, rates of 100+hosts/seconds are easily obtainable.
While this can (IS!) be used by the "bad guys" ... it is actually a very useful
tool for the "good guys" for a couple of reasons:
- You should be aware of what ports are open on your machines and insure
that only those you want/need/know (!) are open. Using nmap allows you
to easily determine this so you can then take appropriate action.
- If a "bad guy" does install a back door that listens on a port,
then you should be able to detect that something is amiss by using nmap.
- Say you are interested in: How many of my machines are web servers?
nmap is pretty darn good for stuff like this.
- Have I upgraded to the latest sendmail everywhere? nmap-web can tell
you the program/version number answering at a specific port.
The later reason is mostly why I wrote nmap-web ... which is basically
a web interface to nmap and allows you to (via a web interface) quickly
and easily select a list of ports and a list of hosts and it tells you
which machines have which open ports. nmap generates this output itself;
but nmap-web makes it just a little bit easier.
nmap-web requires Perl (and nmap! ;-) and should be runnable under any
Web Server running on any *NIX platform. Note that nmap-web only scans tcp
ports, so it can be run as a "normal" user - i.e. no root access is required,
which would be needed to scan udp ports. That could easily be changed, but I
wanted to keep it simple. Pls see the INSTALL document for the misc. tweeks
you'll need to make to get it working at your site.