[ale] Metasploit vs Shodan

[Arie vW]

What exactly are you looking for? nmap is the go-to port scanner (in my
experience).
Metasploit is more of a exploitation tool although it does have some
auxiliary scanning modules too.
I may not have fully understood your question, but I do know the majority
of tools can be downloaded on any distro so there is no need to jump to
Kali unless you want the whole shebang. Kali does have an ARM image
nowadays I believe, but like I said, depending on what exactly you're
looking for, probably a lot of unnecessary stuff.
Also, check out nessus, I haven't played with it too much (I think there's
a free version) but it kinda lays it out like shodan from what I remember.

Arie


On Mon, Dec 3, 2018, 5:35 PM Chris Fowler via Ale <ale at ale.org wrote:

> Recently I've been playing with Shodan and I really like it.  I would
> really like to see info like it provides, but for systems in private
> address space.  I could proxyarp a private machine I'm testing to a public
> address, but I need a commercial API key to trigger the shodan mothership
> to scan it.
>
> Does Metasploit provide the same info?  I can load Kali Linux on a Pi Zero
> W and have it scan the local subnet.
>
> Chris
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> https://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.ale.org/pipermail/ale/attachments/20181203/75539b2b/attachment.html>