Can someone recommend some self-hosted or not, tool that I could schedule for periodical scans of all I host and is exposed to public internet?
I think I did all by the book now, including crowdsec and/or fail2ban, but recently for example I got an email from German CERT that my n8n is out of date and has some CVEs. All of them were not exploitable in my case but that got me thinking that if CERT can do it, maybe there are some services or tools that I could use and get alerts sooner if something is vulnerable in my infrastructure.
Any recommendations welcomed! Ideally self hosted and FOSS of course.
You must log in or # to comment.
There are variouse alternatives to see what ports are open. Usually they autyo scan just the ip you come from, to avoid being used to scan a potential target.
If you want more, just use Greenbone. Run it twice. Once from another IP just to know how the world sees you. One time internal network and add accounts to greenbone allowing it to login and check further.
If you run linux, then Lynis is awesome to verify your config
If you run linux, then Lynis is awesome to verify your config
+1 for Lynis if you are scanning for vulnerabilities. Some of the recommendations won’t really apply to a homelab, but it is pretty comprehensive. A great way to harden your server(s).
OpenVAS is a vulnerability scanner that appears to be open source.
Metasploit is another that I think is free and might be open source.
Are you just wanting to scan certs? LetsEncrypted partnered with RedSift to offload their cert expiration checks. It’s free: https://iam.redsift.cloud/signup?product=cert-letsencrypt. Uptime Kuma will also track your certs too.
