qubitac/acscanner repository overview

⁠AC Scanner

AC Scanner is QubitAC's Automated Cryptographic Discovery and Inventory (ACDI) tool. It scans a domain's available servers to create a cryptographic bill of materials (CBOM).

This docker image provides a simple method of carrying out a single scan and viewing the results in a dashboard. This is intended to be used for demo purposes and not as a general scanning platform.

Confidentiality Statement: The scanner runs locally on your machine and generates a cbom file. The dashboard, hosted on qubitac.com, runs locally in your browser. It uses the cbom file as data, but it does not share your data with anyone nor does it create a persistent copy of your data.

⁠Image Deployment

You can deploy this docker image by executing:

Any available port number can be substituted for 8080.

⁠Running the Scanner from your browser (easiest for a single scan)

After the container starts running, navigate to http://localhost:8080⁠ and supply command-line arguments to the script, e.g.:

The script will run in the browser tab labelled "AC Scanner." It will create new tabs "Opening dashboard..." and "QubitAC - Dashboard."

NOTE: You will probably need to allow pop-ups from http://localhost:8080⁠ to let these tabs be created.

It may take a few seconds for the dashboard to populate.

For help on running the scanner, supply argument -h in the AC Scanner input box and look for output in the AC Scanner browser tab.

⁠Running the Scanner from the command line

After you get a shell on the container, you can do the following to run from the command line:

Removing the .dockerenv file causes the script to operate in a more user-friendly way in your shell.

The --noinstall flag must be used because the docker image eliminates the go install (to save space) and the default scanner behavior is to check for dependent software version compatibility.

Scanner artifacts will be placed in subdirectories of the /app/scripts directory.

⁠MacOS Note

Some docker implementations may run with an outdated seccomp profile which will cause a "Scan failed: Check output above." message when you attempt to send the command line arguments in the form. If this is the case you may want to run the image as follows: