Tool to use Nmap, in Flask with different types of scans. 👁
The project is open to partners.
| Distribution | Version Check | supported | status |
|---|---|---|---|
| Kali Linux | 2024.3 | yes | working |
| Parrot Security OS | 6.0 | yes | working |
| Windows | 11 | yes | working |
| BackBox | 8.1 | yes | working |
| Arch Linux | 2024.06.01 | yes | working |
To run some types of advanced scans with Nmap (such as -sS, -O, -A), sudo is required. Make sure that the user running the application has the necessary permissions or configure sudo to not prompt for a password when running Nmap (this should be done with caution).
Sudo permissions without password (optional): If you want to prevent Flask from requesting the sudo password when running certain scans, you can configure sudo to allow the user to run nmap without a password:
sudo visudo
Then, add a line like the following to the end of the file (replace username with the system user name):
username ALL=(ALL) NOPASSWD: /usr/bin/nmap
Run the program as sudo: Since the Flask application is running the Nmap command and it needs root permissions, a straightforward solution is to run Flask with sudo:
sudo python3 app.py
However, this is not the most secure solution, especially in a production environment. If you decide to use this method, make sure it is only enabled in controlled environments.
Assign specific permissions to Nmap using setcap: If you want to avoid running the entire Flask script with sudo, you can grant specific permissions to Nmap to run without needing root permissions for certain scans:
sudo setcap cap_net_raw,cap_net_admin,cap_net_bind_service+eip $(which nmap)
git clone https://github.com/HackUnderway/NmapScan.git
cd NmapScan
python3 nmap_scan.py
pip install -r requirements.txt
Questions, bugs or suggestions to : info@hackunderway.com
- NmapScan is licensed.
- See LICENSE for more information.
We need partners and sponsors, if you're interested in support or help contact.
- Victor Bancayan - @VictorBancayan - (CEO at Hack Underway)
Fanpage: https://www.facebook.com/HackUnderway
X: https://twitter.com/JeyZetaOficial
Web site: https://hackunderway.com
Youtube: https://www.youtube.com/@JeyZetaOficial
from 
© 2024