# Tsunami | A General Purpose Network Security Scanner

**URL:** <https://onehack.st/t/tsunami-a-general-purpose-network-security-scanner/96703>\
**Category:** Tools & Scripts\
**Tags:** tools, networking, documents\
**Created:** [July 18, 2020, 1:43pm UTC](https://onehack.st/t/tsunami-a-general-purpose-network-security-scanner/96703 "2020-07-18T13:43:56Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [July 18, 2020, 1:43pm UTC](https://onehack.st/t/tsunami-a-general-purpose-network-security-scanner/96703/1 "2020-07-18T13:43:56Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/0/a/0a356badeaa7e532c68674897111831fc5f5faeb.jpeg)

Tsunami is a general-purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.  
To learn more about Tsunami, visit our [documentations](https://github.com/google/tsunami-security-scanner/blob/master/docs/index.md).  
Tsunami relies heavily on its plugin system to provide basic scanning capabilities. All publicly available Tsunami plugins are hosted in a separate [google/tsunami-security-scanner-plugins](https://github.com/google/tsunami-security-scanner-plugins) repository.

**Current Status**

- Currently Tsunami is in ‘pre-alpha’ release for developer preview.
- Tsunami project is currently under active development. Do expect major API changes in the future.

**Quick Start**  
To quickly get started with Tsunami scans,

1. install the following required dependencies:

```auto
nmap >= 7.80ncrack >= 0.7

```

1. start a vulnerable application that can be identified by Tsunami, e.g. an unauthenticated Jupyter Notebook server. The easiest way is to use a docker image:

```auto
docker run --name unauthenticated-jupyter-notebook -p 8888:8888 -d jupyter/base-notebook start-notebook.sh --NotebookApp.token=''

```

1. execute the following command:

```auto
bash -c "$(curl -sfL https://raw.githubusercontent.com/google/tsunami-security-scanner/master/quick_start.sh)"

```

The `quick_start.sh` script performs the following tasks:

1. Clone the [google/tsunami-security-scanner](https://github.com/google/tsunami-security-scanner) and [google/tsunami-security-scanner-plugins](https://github.com/google/tsunami-security-scanner-plugins) repos into `$HOME/tsunami/repos` directory.
2. Compile all [Google Tsunami plugins](https://github.com/google/tsunami-security-scanner-plugins/tree/master/google) and move all plugin `jar` files into `$HOME/tsunami/plugins` directory.
3. Compile the Tsunami scanner Fat Jar file and move it into `$HOME/tsunami` directory.
4. Move the `tsunami.yaml` example config into `$HOME/tsunami` directory.
5. Print example Tsunami command for scanning `127.0.0.1` using the previously generated artifacts.

**Contributing**  
Read how to [contribute to Tsunami](https://github.com/google/tsunami-security-scanner/blob/master/docs/contributing.md).

**Disclaimers**  
Tsunami is not an official Google product.

## GitHub:

> **[GitHub - google/tsunami-security-scanner: Tsunami is a general purpose network security...](https://github.com/google/tsunami-security-scanner)**
>
> Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.