Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

My scenario is that I have a VPS with Apache (mostly for development of my own projects) accessed via SSH; and I time to time I would like to do a quick check just to be sure that there's no potential flaw I would not be aware of.

Most of the time I'm behind evil firewalls so I can't simply do an n-map from another (desktop) machine.

Now there are these services like nmap scan at online-domain-tools.com or GRC's ShieldsUp! that allow for such quick security checkup.

Nice. However:

  • they never offer scan of a third IP---only the very same IP that is requesting the scan via the web interface (obviously because that could be easily abused)

  • since all (that I know) have web-based interface, it's quite complicated to use them from SSH command line (unless you're a lynx/links freak); particularly, scans cannot be easily scheduled or called from a test script

Is there an equivalent to these services that can be used for a single machine, via command line, or other terminal-friendly interface?


Edit: I'm starting to think I might be looking in the wrong direction. Or that the service is yet to be offered ;)

But to make it clear, idea of such scenario is:

  1. I make agreement (and pay) provider of this service, running on theirhost

  2. I log in to myhost

  3. Using a a CLI tool I instruct theirhost to scan me (which and how scans they run is their know-how)

  4. Either directly or e.g. via e-mail, I receive results

share|improve this question
    
Maybe you should look at nmap closer: try nmap.org Also, you don't want to be executing any such scanning on the server but targeting the server from an external host usually. –  ewanm89 Nov 6 '12 at 21:25
    
@ewanm89 I don't want to run the scans on my host, I want to instruct other host: "Please, scan me (and send me report e.g. via e-mail or store it for me)." ---- About the same thing what I would use one of those web services for, if I had X on the server, which I obviously don't want. –  Alois Mahdal Nov 6 '12 at 21:34
    
Okay, then, nmap, nessus... plenty of tools depending what precisely you want to scan for just start looking. nmap can very easily be used from the command line if you learn to use it. –  ewanm89 Nov 6 '12 at 21:37
    
@ewanm89 I know nmap (don't know Nessus, had just a glance) but my main limitation is that I don't have the other host to perform scans from This is exactly where ShieldsUp! comes handy, except that it's not very usable from terminal environment. –  Alois Mahdal Nov 6 '12 at 21:43
2  
Avoid ShieldsUP - it's generally hocus-pocus. Furthermore, Steve Gibson is a known infosec charlatan. There was even an entire website dedicated to debunking his marketing hype and sci-fi security gibberish. –  Polynomial Nov 7 '12 at 11:31

3 Answers 3

up vote 8 down vote accepted

Pay for another cheap VPS and install nmap, w3af, etc and any other tools there. Then you SSH in and run your tests. You could also schedule the tests to happen automatically and email the results.

This is not a pre-made service, but it does accomplish what you've asked for with a handful of tiny scripts, done more cheaply and with more control than a paid service.

share|improve this answer
3  
Alternatively, instead of paying for one VPS more, I could use a friend's VPS for that. In exchange for a reverse service... –  Alois Mahdal Nov 7 '12 at 13:17

You can rent an EC2 server fo only 6.5 cents per hour (11.5 cents for Windows). Then run whatever scanning/testing suite you want.

If you're looking for a third-party security scanning service, there's hundreds of them now that these scans are a required part of PCI compliance. Just Google for "PCI Scanning Vendor".

share|improve this answer
    
And some of them are actually quite good :-) –  Rory Alsop Nov 7 '12 at 11:22

If your VPS is running Linux, you could install a simple web proxy (such as Tinyproxy) and then visit sites like the ones you mentioned using the proxy. You can configure the proxy to permit connections only from the local host, and then use an SSH tunnel to connect to the proxy.

For example, assume you have a web proxy on your VPS which is listening on localhost:3128. You can log in via SSH and tunnel your local machine's port 3128 to the VPS's 3128 like this:

ssh -L 3128:localhost:3128 your-vps-host.com

Having done that, tell the web browser on your local machine to use localhost:3128 as a proxy. Then visit one of the scanning sites you mentioned, and they'll scan the IP address you're coming from -- which will be your VPS.

share|improve this answer
    
Neat! Works like a charm! (Just FTR: I had to allow my IP address in /etc/tinyproxy.conf) –  Alois Mahdal Nov 7 '12 at 23:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.