5 ms·
This tool does not provide enough information about the scan and the detected "problems". 1. It's only scanning for default ports. 2. It told me about having
by v4n4d1s 9y ago
This tool does not provide enough information about the scan and the detected "problems".
1. It's only scanning for default ports.
2. It told me about having a CVE-Score "3/3", please provide me with the exact CVEs, so I can patch my system accordingly.
3. Running a webserver on Port 80 is not insecure per se, it's just not encrypted.
4. No feature to rescan, provided information is probably old.
While I like the overall design, I think this tool is not for technical people, but for everyone who uses the word "cyber" on a daily unironically basis.
- balgan 9y agoHi! 1 - Its scanning 200 ports 2 - Indeed atm we just provide an overall view, we intend to improve this tool further. We had too many people requesting us custom scans when Doublepulsar came out. 3 - True, please submit an issue on the github so a discussion about this can be started. We like having an open formula that people can change/comment on. 4 - Scans are from last 2 months and will keep changing accordingly. It queries our database rather than doing an active scan!
- jsight 9y agoYeah, the CVE scan was really strange to me. I don't see the benefit if I can't see the CVEs themselves.
- sli 9y agoThat's how I felt about all of the ratings. Just arbitrary numbers. I have one out of two ports open? Or do two or more open ports automatically go red? No clue, it doesn't say. 6/6 on HTTP with SSL. Again, six what? Total open HTTP connections? Couldn't I have more than six, and wouldn't that data be important? No clue, it doesn't say. Trying the site with my VPN connection enabled is amusing.