ralsei38/scanner

learning networking basics...

scanner's Issues

Thread Class in seperate files

Use thread class instead of calling theses (ugly) function calls

UDP

all tcp method must rely on the SCAN_TYPES list

TCP half-scan

use threading to reduce scan duration

Handle exceptions coming from the View

Allow the configuration of all layer parameters

Set all parameters to None by default, only consider them when caller set them

OS detection ?

Scapy provides Passive OS fingerprinting ! read the doc

test every methods using pycov 🧪

modify unit tests, create container

Create containers which will be used as scan targets by the self-hosted runner.
Modify each unit test to match the correct IP addresses

MVC

find an explanation: cannot self ICMP

Cannot ping pong myself using Scapy lib, and it's triggering me.

too many open files

Make proper use of threads, one thread per port isn't necessary or at least thread could be opened and closed progressively.

Mixed list UDP / TCP open ports, is it ok ?

procedures or methods ?

Scan methods rely a lot on procedures, but is it really convenient ?

find a pretty way to handle thread number configuration

ARP scan

Self-hosted Github runner :test_tube:

problem

Every method relying on sending data to another host cannot be tested deeply.
Every test related to networking interactions either fails or is biased.

solution

Implement a self-hosted Github-runner, and dummy containers (targets),
thus simulating a small infrastructure. doc here

UDP scan

TCP full-scan

Ansible project deploying runner and dummy VMS 💊

automatically deploying the infrastructure allow unit testing can be a good preventing measure.

Thread arguments

args=()
kwargs={} seems like it's on being processed

DHCP starvation --> Rogue DHCP server

Fix timeout coherency

timeout called from upper methods / objects should be transmitted to inner methods if specified

Implement UDP scan

Dedicated VM 🧪

• Either deploy a virtual machine or a container
• Deploy a simple Apache installation (working on port 80)
• deploy an app relying on UDP,

So that single IP scan can be run against the same machine

TCP full-scan

Check whether Scapy's send() method works as intended. (see TCP full scan, when sending ACK flag)

tcp and udp hard scan

TCP & UDP scan from the Network class first run a ping scan and then run the port scan on each of the found hosts to unnecessary port scans on hosts which are not up.
It must still be possible to port scan each LAN IP one by one, even if an ICMP response is not received.