trailofbits / osquery-extensions

osquery extensions by Trail of Bits

Home Page:https://blog.trailofbits.com/2017/12/14/announcing-the-trail-of-bits-osquery-extension-repository/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Extension idea: nmap scanner

vector-sec opened this issue · comments

commented

My co-workers and I were talking today about how a nmap or nmap-like extension that could be used to perform ping sweeps and port scans could be very useful for device discovery on a network.

We're torn between using nmap directly and having the table work something like select * from nmap where args = '<insert standard nmap args>'or if it would be better to create an nmap-like extension that scans using native code instead of needing nmap to be installed on the system.

This would be extremely useful!!