Git Product home page Git Product logo

Comments (4)

magl0 avatar magl0 commented on July 27, 2024 2

Hi we've fixed the nmap and ncrack plugin to check both /usr/bin/nmap and /usr/local/bin/nmap on initialization. You can simply execute the quick start script again to recompile everything and rerun the scanner.

If your nmap/ncrack binaries are installed on different paths, then you could update the tsunami.yaml config file accordingly, see the documentations for the nmap and ncrack plugins for details.

from tsunami-security-scanner.

serinuntius avatar serinuntius commented on July 27, 2024

I have the same problem.

from tsunami-security-scanner.

hirotakaster avatar hirotakaster commented on July 27, 2024

I got same problem too. Then I change following files directly and could run tsunami.

  • nmap
    $HOME/tsunami/repos/tsunami-security-scanner-plugins/google/portscan/nmap/src/main/java/com/google/tsunami/plugins/portscan/nmap/client/NmapClient.java
    private static final String DEFAULT_NMAP_BINARY_PATH = "/usr/bin/nmap";
    to
    private static final String DEFAULT_NMAP_BINARY_PATH = "/usr/local/bin/nmap";

  • ncrack
    $HOME/tsunami/repos/tsunami-security-scanner-plugins/google/detectors/credentials/ncrack/src/main/java/com/google/tsunami/plugins/detectors/credentials/ncrack/client/NcrackClient.java
    private static final String DEFAULT_NRACK_BINARY_PATH = "/usr/bin/ncrack";
    to
    private static final String DEFAULT_NRACK_BINARY_PATH = "/usr/local/bin/ncrack";

from tsunami-security-scanner.

avatar commented on July 27, 2024

FYI: I wrote Dockerfile.

FROM ubuntu:18.04 AS builder

RUN apt-get update -y && apt-get upgrade -y

RUN apt-get install -y git openjdk-11-jdk && rm -rf /var/lib/apt/lists/*

ADD https://api.github.com/repos/google/tsunami-security-scanner/compare/master...HEAD /dev/null
RUN git clone https://github.com/google/tsunami-security-scanner /opt/tsunami-security-scanner
ADD https://api.github.com/repos/google/tsunami-security-scanner-plugins/compare/master...HEAD /dev/null
RUN git clone https://github.com/google/tsunami-security-scanner-plugins /opt/tsunami-security-scanner-plugins

WORKDIR /opt/tsunami-security-scanner
RUN ./gradlew shadowJar

WORKDIR /opt/tsunami-security-scanner-plugins/google
RUN ./build_all.sh

FROM ubuntu:18.04

RUN apt-get update -y && apt-get upgrade -y

RUN apt-get install -y openjdk-11-jdk nmap ncrack && rm -rf /var/lib/apt/lists/*

COPY --from=builder /opt/tsunami-security-scanner-plugins/google/build/plugins /opt/tsunami/plugins
COPY --from=builder /opt/tsunami-security-scanner/main/build/libs/tsunami-main-*-cli.jar /opt/tsunami/tsunami-main-cli.jar
COPY --from=builder /opt/tsunami-security-scanner/tsunami.yaml /opt/tsunami/tsunami.yaml

WORKDIR /opt/tsunami
ENTRYPOINT ["java", "-cp", "tsunami-main-cli.jar:/opt/tsunami/plugins/*", "-Dtsunami-config.location=/opt/tsunami/tsunami.yaml", "com.google.tsunami.main.cli.TsunamiCli", "--scan-results-local-output-format=JSON", "--scan-results-local-output-filename=/dev/stdout"]
CMD ["--ip-v4-target=127.0.0.1"]

from tsunami-security-scanner.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.