Gherkin is a web-enabled, multi-threaded, centralized security scan manager incorporating Nessus vulnerability scanning, dns and nmblookup host resolving, and nmap fingerprinting and scanning.
Be the first to post a text review of Gherkin network scan manager. Rate and review a project by clicking thumbs up or thumbs down in the right column.
* removed option to pause before launching nessus scans * added gherkin_queued_job_options to mitigate table bloat in large databases (see erd) * fixed bug where bitwise and was errantly used (thanks, Todd) * updated gherkin_report to show number of queued jobs * fixed some old references to addresses.address * added in-memory job lists to avoid db quey time for random job selection -- now handles starting scans for 24 class bs all at once * changed the way jobs are selected and assigned * added informational logging * moved splitting jobs to the management thread * fixed off-by-one bug in month of nessus scan dates (thanks, Mike) * fixed quotation bug in web UI that hurt the display of targets with apostrophes * changed status screen in web UI to not show queue unless told to, and to show the number of queued jobs without showing the queue
0.2.2 * added config options to probe (and customize) probing for host liveness before scanning. * added config option to not add a db row for a nmap scan that returns no ports. * altered 'kill' command to be kill and abort running scans * added 'stop' command to kill but wait for running scans to finish * weeded out some warnings * improved logging * fixed a bug in address enumeration within ranges * closed the input file in parse_nmap_output. oops. * ranges can now include addresses with 255s and 0s in the second, third, and fourth octets. * removed dead sequence (nessus_scripts_id_seq)
* changed default number of threads from 30 to 15 * added search functionality * removed some warning messages * added support for moving addresses, ranges, and netgroups from one netgroup to another * minor aesthetic changes * no longer adds a row in the database for addresses for which scans return nothing * fixed bug where addresses witha 0 in the second or third octet would not make it into the queue when a range is scanned (thanks, Eugene) * changed behavior in database to cascade on deletes; scans are no good without an address... * added an index to nessus_scripts.risk for speed * renamed etherpickle (ep_) tables to disco tables, as the name has changed * added an error message to scan page if no scan is selected an 'do it' is hit * on all html lists, removed forms in favor of anchor tags; mozilla doesn't like all the forms * fixed display bug while viewing nessus script details * updated default nessus config
- made the leap from using networks to group addresses to the much more flexible netgroups - removed network discovery - created a new command-line script and segregated functionality across the three - added database support for etherpickle - address records are created only for addresses that have been successfully scanned rather than for every address - changed log output of command-line tools to stderr - web interface changes: - new scan selection scheme in web interface - there is no longer the option of displaying scan output to browser - fixed bug w/ single-cpu load display on status page - various aesthetic changes on status page - added a png of the erd for reference - fixed nessus_import_scripts to accomodate for script_name() .nasl syntax (thanks for the heads-up from Khairul)
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?