This is just a wrapper on nmap with the vulners script. If you run this, you can post to /scan with a comma-separated list of addresses to scan, and it will reply with all of the scan results in a single JSON list.
The service runs on port 8080 in the container
- Run the Docker container.
- From the same machine, run
curl -i -d "scanme.nmap.org" localhost:8080/scan - Wait for it to run the full scan. If this times out, increase your request's timeout.
- Receive response.
- Look into migrating to the https://github.com/ullaakut/nmap wrapper instead of t94j0/nmap.
- Cache results to a database
- Add an endpoint to query that database
- Add a query param
webhookAddressto/scanthat lets you specify an address to send results to when the scan is finished. Do this instead of maintaining an active TCP connection for so long.