Provide pds solution `infralight`

[de-jcup]

Situation

We have currently only one infrastructure scanner : NESUS which is also only available as an adapter (no PDS solution), non-free and is also deprecated.

Another problem is here that normally scans which such a big solution like NESSUS (or OpenVAS) will penetrate the targets very agressively which makes it often impossible to scan in a real environment. (Firewall rules, Intrusion detection etc.)

Wanted

We want a lightweight infrascan PDS solution which provides infrascan in a passive way.

The product is called infralight

Solution

• create pds solution
• embed a ssl scanner
• embed nmap
• provide a "infralight-collector" spring boot application
  • can import and filter product results (sslscan, nmap, ... more in future)