Any services or products using OSVDB should register through the
product integration process. This will help increase awareness of
your product or service, as well as help OSVDB by letting us know
who is using our services (it also required, as stated in the
free license).
By notifying OSVDB, you will also provide us proper contact
information for your company. This way, we are able to notify you
of any significant changes to the OSVDB database or software
which could have a downstream impact on your product or
service.
Please complete the
product integration
form as the first step towards having your product reviewed
and listed on the OSVDB.org web site. All products or services
must be able to provide sample reports, demo software or
accounts, or other means to demonstrate to the OSVDB staff that
licensing requirements have been met. More information on this
process will be sent after the form has been submitted.
| OSVDB Supported Products |
top |
- Nikto -
Nikto is an Open Source (GPL) web
server scanner which performs comprehensive tests against web
servers for multiple items, including over 2600 potentially
dangerous files/CGIs, versions on over 625 servers, and version
specific problems on over 230 servers. Scan items and plugins
are frequently updated and can be automatically updated (if
desired).
- Snort - Snort is an
open source network intrusion detection system, capable of
performing real-time traffic analysis and packet logging on IP
networks. It can perform protocol analysis, content
searching/matching and can be used to detect a variety of
attacks and probes, such as buffer overflows, stealth port
scans, CGI attacks, SMB probes, OS fingerprinting attempts, and
much more.
- Nessus - The "Nessus"
Project aims to provide to the internet community a free,
powerful, up-to-date and easy to use remote security scanner. A
security scanner is a software which will audit remotely a
given network and determine whether bad guys (aka 'crackers')
may break into it, or misuse it in some way.
OSVDB maintains mappings with many other sources of information,
including
Common Vulnerabilities
and Exposures (CVE). CVE's mission is "to make it easier to
share data across separate vulnerability databases and security
tools. While CVE may make it easier to search for information in
other databases, CVE should not be considered as a vulnerability
database on its own merit."
*
OSVDB can be searched for CVE IDs through the
search interface by entering the CVE or CAN
number in the "Reference" field. This will return all OSVDB
entries which have that CVE entry as a reference. Any OSVDB entry
which has a cross-reference to a CVE entry will have it listed in
the "External References" section of the vulnerability
display.
