Skip to main content

​
Network Scanning

AIPTx can scan network infrastructure for security vulnerabilities.

​
Basic Network Scan

aiptx scan 192.168.1.0/24 --type network

​
Configuration

network:
  targets:
    - 192.168.1.0/24
    - 10.0.0.1-10.0.0.50

  ports:
    common: true          # Top 1000 ports
    custom: [8080, 8443, 9000]
    range: "1-65535"      # Full scan (deep mode)

  service_detection: true
  version_detection: true
  os_detection: true

​
Tests Performed

TestDescription
Port scanningOpen ports discovery
Service detectionRunning services
Version detectionSoftware versions
CVE matchingKnown vulnerabilities
SSL/TLS analysisCertificate and cipher issues
Default credentialsCommon service passwords

​
Service-Specific Tests

network:
  services:
    ssh:
      weak_algorithms: true
      default_credentials: true

    mysql:
      anonymous_access: true
      weak_passwords: true

    redis:
      no_auth: true
      dangerous_commands: true

​
Output

Network Scan Results:

192.168.1.10
├── Port 22/tcp (SSH)
│   ├── OpenSSH 7.9
│   └── ⚠️ Weak key exchange algorithms
├── Port 80/tcp (HTTP)
│   ├── nginx 1.18.0
│   └── ✅ No issues
└── Port 3306/tcp (MySQL)
    ├── MySQL 5.7.32
    └── ❌ Remote root login enabled

​
Internal Network Testing

For internal network scans, deploy the AIPTx agent: 
docker run -d --network host aiptx/agent \
  --api-key ${AIPTX_API_KEY} \
  --targets 10.0.0.0/8