https://github.com/hulto/buckets
create service group buckets based on scans
https://github.com/hulto/buckets
ccdc data-science inventory-management kmeans-clustering redteam sysadmin
Last synced: 2 months ago
JSON representation
create service group buckets based on scans
- Host: GitHub
- URL: https://github.com/hulto/buckets
- Owner: hulto
- Created: 2022-02-19T19:33:46.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2022-02-20T00:39:34.000Z (over 4 years ago)
- Last Synced: 2025-05-26T19:09:55.302Z (about 1 year ago)
- Topics: ccdc, data-science, inventory-management, kmeans-clustering, redteam, sysadmin
- Language: Python
- Homepage:
- Size: 68.4 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# buckets
create service group buckets based on scans
## How it works.
Given an nmap scan xml output.
`nmap -sV -sC -p22,443,53,111,3306,21,23,445,25,5432,445,587,465 -T5 10.10.0.0/24 -oX ./scans/10.10.0.0-24.xml`
parse-text.py reads in the xml, finds all open ports for each host and records the cpe identifiers associated with them.
This data is then put into a one hot format with each port-status-cpelist being represented by a column.
We then use the sklearn KMeans alogorithm to create a `NUMBER_OF_SERVICEGROUPS` number of groupings based on the similarity of services running on each port.