| স্ক্যান টাইপ | উদ্দেশ্য | প্রযুক্তি/প্রোটোকল | আউটপুট |
|---|
| Host Discovery (Ping Sweep) | লাইভ হোস্ট শনাক্ত করা | ICMP Echo, ARP Request, TCP SYN/ACK (Port 80/443), UDP (Port 53/67/161) | Active IP List |
| Port Scanning | খোলা পোর্ট এবং রানিং সার্ভিস শনাক্ত করা | TCP SYN (Stealth), TCP Connect, UDP, FIN/NULL/XMAS, Idle/Zombie Scan | Open/Closed/Filtered Ports, Service Version |
| Service/Version Detection | সার্ভিসের ভার্সন ও কনফিগারেশন ফিংগারপ্রিন্টিং | Banner Grabbing, Probe Packets (Nmap -sV), SSL/TLS Cipher Enum | Service Name, Version, Extrainfo, CPE |
| Vulnerability Scanning | জানা ভালনারেবিলিটি (CVE) শনাক্ত করা | Credentialed/Non-credentialed Checks, Plugin/Script Database (Nessus, OpenVAS, Nuclei) | CVE ID, CVSS Score, Remediation, References |
| Configuration/Compliance Audit | সিকিউরিটি বেসলাইন (CIS Benchmark, DISA STIG) চেক | Agent/SSH/WinRM/WMI কনেকশন → ফাইল, রেজিস্ট্রি, পলিসি অডিট | Pass/Fail Rules, Hardening Score |
| Web Application Scanning (DAST) | ওয়েব অ্যাপে SQLi, XSS, Path Traversal, Auth Bypass ডিটেক্ট | Crawling + Attack Injection (Burp Scanner, OWASP ZAP, Acunetix, Nikto) | Vuln List with Request/Response, PoC |
| Network Traffic Analysis (NDR) | প্যাসিভ ট্রাফিক মনিটরিং — অ্যানোমালি, C2, Data Exfiltration | SPAN/TAP + Zeek/Suricata/ML Engine (ExtraHop, Vectra, Corelight) | Alerts, Flow Records, PCAP |
| টুল | প্রकार | লাইসেন্স | কী ফিচারস | সেরা ফর |
|---|
| Nmap (Network Mapper) | Port/Host/Service/Script Scanner | Open Source (GPL) | NSE Scripts (600+), OS Detection, Timing Templates, Output Formats (XML, JSON, Grepable) | Network Discovery, Pentest Recon, Audit |
| Masscan / ZMap | Stateless High-Speed Port Scanner | Open Source | 10M+ pps, Internet-wide Scanning, Stateless (No State Tracking) | Large Scale Recon, Asset Discovery |
| Nessus (Tenable) | Vulnerability Scanner (Commercial) | Proprietary (Free: Nessus Essentials - 16 IPs) | 80,000+ Plugins, Credentialed Scans, Compliance (CIS, DISA), Agent-based | Enterprise Vuln Management, Compliance |
| OpenVAS / Greenbone (GVM) | Vulnerability Scanner (Open Source) | GPL | NVT Feeds (Daily), Credentialed Scans, Report Formats, GSA/GSAD Web UI | Open Source Vuln Mgmt, SMB/Enterprise |
| Rapid7 InsightVM (Nexpose) | Vuln Mgmt Platform (Commercial) | Proprietary | Live Dashboard, Risk Score (Real Risk), Remediation Projects, Cloud/Container Scanning | Enterprise Risk-based Vuln Mgmt |
| Qualys VMDR | Cloud-native Vuln Mgmt (SaaS) | SaaS Subscription | No Scanner Appliance Needed (Cloud Agent), Continuous Monitoring, Patch Integration | Cloud-first, Hybrid, Large Scale |
| Burp Suite Pro / Enterprise | Web App Scanner (DAST/IAST) | Commercial | Crawler, Scanner, Intruder, Repeater, Extensions (Logger++, Auth Analyzer), CI/CD Integration | AppSec, DevSecOps, Bug Bounty |
| OWASP ZAP (Zed Attack Proxy) | Web App Scanner (Open Source) | Apache 2.0 | Active/Passive Scan, Auth Scripting, API Scan (OpenAPI/GraphQL), CI/CD, Heads-up Display | Free DAST, DevSecOps, Learning |
| Nuclei | Template-based Fast Scanner | Open Source (MIT) | YAML Templates (CVE, Misconfig, Tech Detect, Fuzzing), Mass Scanning, Rate Limiting | Fast Recon, CVE PoC Validation, Bug Bounty |
| LanSweeper / Asset Sonar | IT Asset Discovery + Vuln | Commercial | Agentless/Agent, Software/Hardware Inventory, License Compliance, Network Map | ITAM + Vuln Mgmt Unified |
| Wazuh / OSSEC | Host-based IDS + Vuln Detection | Open Source (GPL) | FIM, Rootkit Detection, Log Analysis, Vuln Detection (NVD Feed), MITRE ATT&CK Mapping | XDR/EDR + Vuln, SOC |
