Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dashlord.yml - disable zap & nmap modules #177

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update dashlord.yml - disable zap & nmap modules #177

wants to merge 1 commit into from

Commits on May 2, 2024

  1. Update dashlord.yml - disable zap & nmap modules 

    The fact of openly publishing information that could assist malicious actors in attacking systems raises real questions in terms of cyber risk management.
It would seem more appropriate to only publish certain sensible elements on a private Dashlord space with authentication. requested.

Of course, anyone can run a Zap or nmap scan, but these scans are noisy and detectable.
The current state of the beta.gouv.fr instance of Dashlord tends to facilitate attackers by helping them target vulnerable and easily compromisable assets.
That's why we're requesting the deactivation of these scans for now.
    @florianbusi
    florianbusi authored May 2, 2024
    Configuration menu
    Copy the full SHA
    8b1c40c View commit details
    Browse the repository at this point in the history