VulnScan AI v0.4.8
July 24, 2026
Network exposure scanner (10th scanner)
New network scanner: the first scanner that inspects hosts OTHER than the
one it runs on. Shells out to nmap -sV for host discovery, a scoped port
scan and service/version detection, then flags the same plaintext/legacy-
protocol and sensitive-service exposures as the ports scanner (shared risk
taxonomy, extracted into net_classify.py) — the same risk model, observed
remotely instead of via local ss. No CVE/CPE matching on detected service
versions yet (parked for a later phase).
Safety: gated on an explicit, config-only network_targets allow-list
(hosts/CIDRs you are authorized to test) — never a CLI flag, no env
override. The scanner stays genuinely unavailable until configured, and
prints an authorization reminder on every real invocation. Findings for a
target-bearing host are detection-only: remediation.py hard-refuses to
propose or execute commands against them, since a fix for a remote host
cannot run on this one.
New "Network scan" menu entry. Optional Recommends: nmap (degrades
gracefully if absent). 323 tests, bandit clean.
Install: see https://repo.techhack.nl