[{"_1":2,"_152":-5,"_153":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_131":132},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_124":-5,"_125":11,"_126":17,"_127":11,"_128":-5,"_129":130},"canonicalUrl","https://hub.docker.com/r/chko/flan/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","chko","reponame","flan","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2019-11-28T13:51:12.148011Z","description","","is_private","last_updated","2019-11-28T15:40:30.714487Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",202,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n\nFlan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network.\n\nFlan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a full-fledged network vulnerability scanner. Flan Scan makes it easy to deploy Nmap locally within a container, push results to the cloud, and deploy the scanner on Kubernetes.\n\n\nGetting Started\n------\n1. Clone this repository\n\n2. Make sure you have docker setup:\n```bash\n$ docker --version\n```\n\n3. Add the list of IP addresses or CIDRS you wish to scan to `shared/ips.txt`.\n\n4. Build the container:\n```bash\n$ make build\n```\n (or alternatively, pull it from Dockerhub: `make pull`)\n\n5. Start scanning!\n```bash\n$ make start\n```\n\nWhen the scan finishes you will find a Latex report of the summarizing the scan in `shared/reports`. You can also see the raw XML output from Nmap in `shared/xml_files`.\n\n

\n\nCustom Nmap Configuration\n-------------------------\nBy default Flan Scan runs the following Nmap command:\n\n```bash\n$ nmap -sV -oX /shared/xml_files -oN - -v1 $@ --script=vulners/vulners.nse \n```\nThe `-oX` flag adds an XML version of the scan results to the `/shared/xml_files` directory and the `-oN -` flag outputs \"normal\" Nmap results to the console. The `-v1` flag increases the verbosity to 1 and the `-sV` flag runs a service detection scan (aside from Nmap's default port and SYN scans). The `--script=vulners/vulners.nse` is the script that matches the services detected with relevant CVEs.\n\nNmap also allows you to run UDP scans and to scan IPv6 addresses. To add these and other flags to Scan Flan's Nmap command after running `make build` run the container and pass in you Nmap flags like so:\n\n```bash\n$ docker run -v $(shell pwd)/shared:/shared flan_scan \n```\n\nPushing Results to the Cloud\n----------------------------\n\nFlan Scan currently supports pushing Latex reports and raw XML Nmap output files to a GCS Bucket or to an AWS S3 Bucket. Flan Scan requires 2 environment variables to push results to the cloud. The first is `upload` which takes one of two values `gcp` or `aws`. The second is `bucket` and the value is the name of the S3 or GCS Bucket to upload the results to. To set the environment variables, after running `make build` run the container setting the environment variables like so:\n```bash\n$ docker run --name \\\n -v $(pwd)/shared:/shared \\\n -e upload= \\\n -e bucket= \\\n flan_scan\n```\n\nBelow are some examples for adding the necessary AWS or GCP authentication keys as environment variables in container. However, this can also be accomplished with a secret in Kubernetes that exposes the necessary environment variables or with other secrets management tools.\n\n\n### Example GCS Bucket Configuration\n\nCopy your GCS private key for a service account to the `/shared` file\n```bash\n$ cp /key.json shared/\n```\n\nRun the container setting the `GOOGLE_APPLICATION_CREDENTIALS` environment variable as the path to the GCS Key\n\n```bash\n$ docker run --name \\\n -v $(pwd)/shared:/shared \\\n -e upload=gcp \\\n -e bucket= \\\n -e GOOGLE_APPLICATION_CREDENTIALS=/shared/key.json\n flan_scan\n```\n\n### Example AWS S3 Bucket Configuration\n\nSet the `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` environment variables to the corresponding variables for your S3 service account.\n\n```bash\ndocker run --name \\\n -v $(pwd)/shared:/shared \\\n -e upload=aws \\\n -e bucket= \\\n -e AWS_ACCESS_KEY_ID= \\\n -e AWS_SECRET_ACCESS_KEY= \\\n flan_scan\n\n\n```\n\nDeploying on Kubernetes\n-----------------------\n\nWhen deploying Flan Scan to a container orchestration system, such as Kubernetes, you must ensure that the container has access to a file called `ips.txt` at the directory `/`. In Kubernetes, this can be done with a ConfigMap which will mount a file on your local filesystem as a volume that the container can access once deployed. The `kustomization.yaml` file has an example of how to create a ConfigMap called `shared-files`. This ConfigMap is then mounted as a volume in the `deployment.yaml` file.\n\nHere are some easy steps to deploy Flan Scan on Kubernetes:\n1. To create the ConfigMap add a path to a local `ips.txt` file in `kustomization.yaml` and then run `kubectl apply -k .`.\n2. Now run `kubectl get configmap` to make sure the ConfigMap was created properly.\n3. Set the necessary environment variables and secrets for your cloud provider within `deployment.yaml`.\n4. Now run `kubectl apply -f deployment.yaml` to launch a deployment running Flan Scan.\n\nFlan Scan should be running on Kubernetes successfully!\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",1441994751,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},"content_type","creator",8078133,"full_size",1441982690,"id",78106226,"images",[97],{"_98":99,"_100":101,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":92,"_59":62,"_112":-5},"architecture","amd64","digest","sha256:44c442c091b6d8375cd8760018bbff0a3f7f04760fefd9c641383631514e8e85","features","last_pulled","2026-09-20T14:20:20.380054609Z","last_pushed","2019-11-28T14:16:41Z","os","linux","os_features","os_version","size","variant","2019-11-28T15:40:30.40054Z","last_updater","last_updater_username","media_type","latest","repository",8096482,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":133,"_140":141,"_129":150,"_151":11},{"_36":134,"_38":135,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":136,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":137,"_75":11,"_76":139,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":138},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_142":60,"_143":-5,"_144":-5,"_145":146},"count","next","previous","results",[147],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":148,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},[149],{"_98":99,"_100":101,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":92,"_59":62,"_112":-5},[],"canDeleteTags","actionData","errors"]

chko/flan

Tags for chko/flan