Invicti Port Scanner

The Invicti Port Scanner performs a port scan against the server hosting the scanned website. When open ports are found, Invicti Web Vulnerability Scanner will proceed with network level security checks against the network service running on that port, such as DNS Open Recursion tests, badly configured proxy server tests, weak SNMP community strings, and many other network level security checks.

In Invicti Web Vulnerability Scanner (WVS), port scanning is disabled by default. Port Scanning can be enabled from Invicti WVS > Configuration > Scan Settings > Scanning Options > Enable port scanning.

The port scanner options can be found at Configuration > Scan Settings > Port Scanner. Here you can configure:

• The number of sockets used for scanning (i.e. the number of ports checked simultaneously)
• The connection timeout (in milliseconds)
• The ports that are checked for by Invicti WVS.

Port Scanning in Invicti Online Vulnerability Scanner (OVS) is done automatically as part of the network scans. Network Scans can be done on both web servers and perimeter servers.

THE AUTHOR

Nicholas Sciberras
Principal Program Manager
LinkedIn

As the Principal Program Manager, Nicholas is passionate about IT security and technology at large. Prior to joining Acunetix in 2012, Nicholas spent 12 years at GFI Software, where he managed the email security and anti-spam product lines, led multiple customer service teams, and provided technical training.