17 Haziran 2016 Cuma

MASSCAN Web Interface

The setup of the masscan web user interface is pretty standard and straightforward. You will need to create a MySQL database, import the database schema, plop the PHP files under your web root, and edit the config file with the correct details. Here’s what this process would look like.

First, install and setup your web server and some other required packages, checkout a copy of the masscan-web-ui repository, and copy over the MASSCAN web ui files to the web root:

Next, you’ll need to create a MySQL database and user for the web application and then import the masscan database schema.

 Lastly, you need to update the web configuration file with the MySQL user and database information that you configured above.

With everything configured, you can now use masscan to scan your targets with the banner checking option, while specifying an XML output format for the results. More information about banner grabbing with masscan can be found on the masscan GitHub page.

 Once all of the scans have been completed, it’s time to import the scan results. In this example, we imported the results of two class A scans, while choosing to clear the database when importing the first results file.

 All that remains is to browse to the web application with a total of more than 3 million results now easily searchable.

For more information and to try out the masscan-web-ui for yourself, you can check out our GitHub project page.

Ref: https://www.offensive-security.com/offsec/masscan-web-interface/

Hiç yorum yok:

Yorum Gönder