topic Re: Security scan tools in Operating System - HP-UX

Security scan tools

Tony Romero — Wed, 12 Jun 2002 23:19:21 GMT

Anyone have any information on a good security scan tool that can be run from a desktop PC instead of installing on the actual server?

Re: Security scan tools

Michael Tully — Wed, 12 Jun 2002 23:47:02 GMT

Hi,

The only one I know of (there could be more) is ESM. From what I remember of this you load a client on your HPUX server and run a 'server' session from either a PC or an NT workstation.

http://www.enterprise-security.com/unixsecurity.htm

HTH
~Michael~

Re: Security scan tools

Steven Sim Kok Leong — Thu, 13 Jun 2002 01:30:14 GMT

Hi,

For databases, the ISS Database Scanner works very well in scanning for Oracle-level security loopholes. I am pleased with it. Too bad there isn't one for SAP R/3 level as yet.

There are two modes, one for normal scan, the other for penetration test.

The database scan test will scan for invalid password policies, poor passwords, poorly assigned table privileges and roles etc. It will also call the ISS Internet Scanner if it is available on the scanner system.

The penetration test will try to compromise an Oracle account on your system and read from the hashed password tables to crack additional Oracle passwords.

Note that you will need the Oracle Net8 (sqlnet) client to be installed on the scanner system to allow it to connect to the scanned system for performing the audits.

Hope this helps. Regards.

Steven Sim Kok Leong

Re: Security scan tools

Steven Sim Kok Leong — Thu, 13 Jun 2002 01:32:28 GMT

Hi,

I forgot to give you the link:

http://www.iss.net

You can download a trial, request for a trial license to test your test database on.

Hope this helps. Regards.

Steven Sim Kok Leong

Re: Security scan tools

Bill Thorsteinson — Thu, 13 Jun 2002 13:09:42 GMT

Check http://www.cisecurity.org/

I haven't yet run the HP-UX
tools, but the Cisco tools
run remotely. A quick look
indicates that server access
may be required.

You could also try any of the
satan derivitives. I don't
know of any for Windows,
but you should be able to
have an old 486 up and running
Linux and scanning within
an hour or two.