24
edits
Security/Projects/Minion: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 13: | Line 13: | ||
==Initial Diagram== | ==Initial Diagram== | ||
[[File:Minon_diagram.png]] | [[File:Minon_diagram.png]] | ||
==Components== | |||
===Web Interface=== | |||
* Log in using Persona (BrowserID) (can be restricted by domain for use on central server by organizations) | |||
* Menu -> New Scan, Running Scans, Completed Scans | |||
** Future: Group Scans (member of groups, permissions, see other scans by group members/project) | |||
* New Scan | |||
** Basic: URL, Port | |||
** Advanced: Login information, technologies used (customize scan such as SQLmap for SQL) | |||
** Future: Scan type based on plugin (web app, client code, etc) | |||
===Task Engine=== | |||
* Instance started when user clicks start scan | |||
* Collects provided information | |||
* Starts scan based on provided information | |||
* Launches tools (Minions) and awaits responses | |||
===Minions (Scanners)=== | |||
* Receive kickoff from task engine | |||
* Scan target | |||
* Send results back to task engine in necessary format (JSON) | |||
===Target=== | |||
* Site hosted by developer | |||
* Can be hosted or running locally | |||