pello + network security

3 hours later… the networkvulns proof of concept is born.

The tool is a mix of python modules: pyparsing, sqlite3, oauth, python-twitter.

His goal is to tell you if the software your network device runs is safe or not:

You must follow @networkvulns in order to get the reply via a direct message.

Example of valid request: fortinet,fortigate,4.0MR2

As you understand it follows the precept of: vendor, product, version.

The database contains infoblox and fortinet products at the moment:

sqlite> select distinct product from vulns;

fortianalyzer
fortiap
fortibridge
forticarrier
forticlient
fortidb
fortiexplorer
fortigate
fortigate-one
fortilog
fortimail
fortimanager
fortiscan
fortiswitch
fortiweb
netmri
nios
portiq
vnios

2011-02-27 update:

• whitelist database instead of a blacklist’s one
• fortinet and infoblox products now supported