Can Backtrack be used as an Automated Network Vulnerability Scanner???

Need a solution that will scan entire network and do robust reporting on existing vulnerabilities of all nodes and devices; also possibly do remediation & patch management...comments please...thx I'm a NOOB.

Quote:

---

Originally Posted by HORTA

Need a solution that will scan entire network and do robust reporting on existing vulnerabilities of all nodes and devices; also possibly do remediation & patch management...comments please...thx I'm a NOOB.

---

Ohh boy.
Something tells me this is not going to turn out well.

Look into Nessus, OpenVAS, etc. This will start you down your path...

or NeXpose. If you can get either of them working, can be quite a hassle sometimes, but they both have support pages on their websites to help you out. Neither NeXpose or Nessus will fix the vunerabilities for you, but both give solutions that you can implement yourself. And remember this wont list all of the vunerabilities. Just the ones they know to search for. What im trying to get at is that just because Nessus and NeXpose say they cant find any vulnerabilities, doesn't mean your safe.

What kind of question is this ? ... Please go back to windows, if you would have taken the time to see what Backtrack that you would have known the answere.

YES. At the N00B

Quote:

---

Originally Posted by HORTA

Need a solution that will scan entire network and do robust reporting on existing vulnerabilities of all nodes and devices; also possibly do remediation & patch management...comments please...thx I'm a NOOB.

---

Please be aware that scanning certain devices with some of the tools in Backtrack can cause the device being scanned to stop responding and possibly crash, so you should be very careful whenever you're doing such scans. You should not do a blanket scan against an entire subnet without knowing exactly what's on the subnet first and doing the appropriate research if the devices on the subnet can withstand a scan.