SMB Scanner

Gallery

About

SMB Scanner Lite is an evidence-first external security posture assessment tool built for Small and Medium Businesses (SMBs) and defensive blue-team audits. It inspects a business domain’s public-facing internet footprint from the outside—without installing agents or disrupting services—and produces a clear 0–100 Posture Score (Grade A–F) alongside Small businesses rely on their domain (company.com) for websites, email, and cloud services, yet rarely have a dedicated security team to check if their digital "doors and windows" are locked. Basic scanners often guess on slow connections or overwhelm non-technical owners with raw logs. SMB Scanner Lite bridges that gap by checking 22 critical security controls and translating every finding into both an Executive Summary for business owners and verified technical evidence for IT administrators.E-mail Anti-Spoofing (4 Controls): Evaluates SPF (full RFC 7208 check_host() logic & 10-lookup limits), DMARC policy enforcement (p=reject), DKIM cryptographic key strength (RSA/Ed25519), and MX hygiene (including RFC 7505 Null MX) to stop criminals from sending forged company emails.Domain & DNS Integrity (6 Controls): Verifies DNSSEC chains by locally recomputing RFC 4034 DS ↔ DNSKEY digests, checks CAA certificate restrictions, tests AXFR zone-transfer boundaries so internal subdomain lists aren't leaked, checks for open resolvers, and detects dangling subdomain takeover risks across 16 cloud providers.Transport Security (2 Controls): Probes TLS 1.0–1.3 protocol support, X.509 certificate validity, SAN hostname matching, key strength, and HTTP-to-HTTPS redirect enforcement.Web Security Headers (9 Controls): Audits HSTS, Content-Security-Policy (CSP), X-Frame-Options (clickjacking), X-Content-Type-Options, Cookie flags (Secure, HttpOnly, SameSite), CORS origin reflection, Referrer-Policy, Permissions-Policy, and server version disclosure.Network & SMB Service Exposure (1 Control · 23 High-Risk Ports): Uses safe protocol handshakes—including unauthenticated MS-SMB2 NEGOTIATE dialect and signing checks on TCP Port 445 (SMB), plus RDP (3389), MySQL, PostgreSQL, Redis, and Elasticsearch—combined with anycast-proxy canary detection to confirm whether sensitive internal services are exposed to the internet.No Claim Without Evidence (evidence-v7 Scoring Model): Network timeouts or unreachable servers are marked INCONCLUSIVE and excluded from scoring rather than reported as false failures.Complete 22-Control Accounting: Every report accounts for all 22 controls; interrupted or filtered runs are explicitly badged as PARTIAL ASSESSMENT.Multi-Format Deliverables: Generates self-contained HTML, JSON, CSV, and TXT reports with longitudinal scan comparison (--compare auto) to track security improvements over time.To prevent malicious misuse of the scanner against unauthorized targets:Private Full Source Code: The complete active scanning engine is maintained in a private branch.Protected Public Sandbox Edition: The publicly downloadable build is hard-locked to 5 publicly free-to-use testing domains (example.com, example.org, example.net, scanme.nmap.org, and badssl.com).Mandatory Pre-Scan User Consent Proof: Every scan requires the user to accept the Privacy Policy & Acceptable Use Agreement first, generating a tamper-evident, SHA-256 hash-chained Consent Proof Receipt (CONSENT-YYYYMMDD-XXXXXXXX) embedded in the report.