ZDzdw·May 3, 2022Submission
Vuls: Agent-less vulnerability scanner for Linux, FreeBSD
30 points · Open discussionfuture-architect
vuls
Go2016–2022
future-architect / vuls
vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Systems & InfrastructureSecurity & PrivacyLanguages & CompilersNetworkingAutomation & WorkflowsLibraries & SDKs
7Distinct people
9Mentions
1Explicit recommenders
12.3KGitHub stars
What to know before exploring
What it is
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
SUDO with Password via ssh is technologically possible. http://askubuntu.com/questions/470383/how-to-avoid-prompt-pa... But there is a problem with sudo with password via ssh.…
kotakanbe used a recommendation phrase. One indexed comment matches. This is a phrase match, not a verdict.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year9 dated mentions
Observed mentions: 2016-04-06 09:45:35 UTC to 2022-05-03 16:23:54 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 8 | 4 | 4 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
9 sourcesVuls parse the changelog of upgradable packages on Ubuntu, Debian, CentOS.
For details, see the flow chart in Scanning Flow section.
https://github.com/future-architect/vuls#scanning-flow
In Vulnerability scanner for Linux and FreeBSDSUDO with Password via ssh is technologically possible.
http://askubuntu.com/questions/470383/how-to-avoid-prompt-pa...
But there is a problem with sudo with password via ssh.
For example...
userA .... 'watch w' on serverA
userB ... 'ssh serverA echo sudopassword | sudo -S command'
userA can steal of root password on ServerA because plain sudo password is displayed by w command.
So, I disable -ask-sudo-password for security reasons.
https://github.com/future-architect/vuls/pull/148
I recommend to define minimum commands in /etc/sudoers on target servers.
CentOS, RHEL
vuls ALL=(root) NOPASSWD: /usr/bin/yum, /bin/echo
Ubuntu, Debian
vuls ALL=(root) NOPASSWD: /usr/bin/apt-get, /usr/bin/apt-cache
Vuls can scan without root on FreeBSD and Amazon Linux.
In Vulnerability scanner for Linux and FreeBSDhttps://github.com/future-architect/vuls/blob/master/scan/fr...
If you're running FreeBSD, I would recommend not giving SSH access to a third party tool for running something that Charlie Root is e-mailing you about daily anyway.
In Vulnerability scanner for Linux and FreeBSDVulnerability scanner for Linux and FreeBSD
113 points · Open discussionVulnerability Scanner:Vuls v0.1.6 Released. Scan Speed 20x Faster on Ubuntu
2 points · Open discussionVulnerability scanner for Linux, agentless, written in golang
5 points · Open discussionVuls: VULnerability Scanner for Linux, agentless, written in golang
14 points · Open discussion