Seccubus

Easy Automated vulnerability scanning and reporting
  • Home
  • Seccubus
    • About Seccubus
    • About the Authors
    • About the name Seccubus
    • Download
    • News
    • Contact us
  • Source Forge
    • Project Summary
    • Bug tracker
    • Download
    • Development Wiki
    • Browse the source
  • Documentation
    • FAQ/General
    • License
    • Seccubus V1
    • Seccubus V2
    • Development Wiki
  • Mailing List
    • Subscribe
    • Archive
  • Search...
  • About Seccubus
Main Menu
  • Home
  • Seccubus
    • About Seccubus
    • About the Authors
    • About the name Seccubus
    • Download
    • News
    • Contact us
  • Source Forge
    • Project Summary
    • Bug tracker
    • Download
    • Development Wiki
    • Browse the source
  • Documentation
    • FAQ/General
    • License
    • Seccubus V1
    • Seccubus V2
    • Development Wiki
  • Mailing List
    • Subscribe
    • Archive
  • Search...
  • About Seccubus
Thanks!
  • Schuberg Philis
  • Cupfighter.net
  • Nessus
  • Nikto
  • NMap
  • JQuery
  • JavascriptMVC

What is Seccubus?

PostDateIconFriday, 07 March 2008 15:56 | PostAuthorIconWritten by Frank Breedijk | PDF Print E-mail

Seccubus automates regular vulnerability scans and provides delta reporting.

The goal is to reduce the analysis time for subsequent scans of the same infrastructure by only reporting delta findings.

What's the issue?

Anyone who has ever used Nessus, OpenVAS, Nikto or another vulnerability scanner will be familiar with the drawback of such tools. Tools like Nessus are very valuable tools, but unfortunately the resultsĀ  contain a lot of noise. Time needed to interpret and create a report using the results of a scan will often be two or three times the time needed to do the actual scan.
Seccubus was created in order to more effectively analyze the results of regular scans of the same infrastructure by efficiently interpreting results.

How does it work?

Seccubus runs scans at regular intervals and compares the findings of the last scan with the findings of the previous scan. The results of this comparison are available in a web GUI
Findings have and can be tagged with one of the following statuses:

New
Finding was detected for the first time
Open Finding was previously detected and has not been altered by the user
Changed Flinging has changed since it was last detected. This status remains until it is changed by the user
No Issue The finding does not pose any security risk and will remain this status until it changes. If the finding changes it will be marked as changed.
Gone The finding had been found in a previous run, but has done been fixed in this run.
Fixed The finding has been fixed and should not reappear. If this finding reappears it will be marked as changed.
Hard Masked The finding is bogus and will not leave this status unless the user changes it.

Because the number of reported findings from Seccubus, especially on the second or later run, is much smaller then the number of findings of a regular scan, there will be much less time involved in the analysis of subsequent runs.

Last Updated (Sunday, 13 December 2009 21:48)

 

Copyright © 2009 Schuberg Philis.
All Rights Reserved.

Joomla template created with Artisteer.