The Rumble Network Discovery Blog

Automatic Web Screenshots
Published on May 13, 2019
We rolled out support for automatic web service screenshots this morning in both the Rumble Agent and the Rumble Scanner (v0.6.6+). This option is on by default, and will result in Rumble capturing an image of each web service it encounters if the system it is running on has a working Google Chrome or Chromium installation. This feature can be toggling using the Scanner command line option --screenshots and from the New Scan screen in the Rumble Console:
Fresh on the heels on Beta 3, we are excited to announce support for the Apple macOS platform. To install the Rumble macOS Agent, copy the download link from the Agents page, download a local copy, and install it using the command line: $ curl -o agent.bin https://console.rumble.run/download/agent/[unique-id-here]/[timestamp]/rumble-agent-darwin-amd64.bin $ chmod u+x agent.bin $ sudo ./agent.bin For a quick rundown on how to use the command-line scanner, take a look at the scanner documentation.
Rumble Network Discovery Beta 3
Published on May 8, 2019
Asset Change Tracking & Notifications Beta 3 is here and ships with network change tracking and notifications! Combined with recurring scans, Rumble now provides detailed asset tracking across local, remote, external, and cloud assets with notifications sent by email or webhook (including Slack!). This release also includes keyword-based search for the Inventory, a major overhaul of the scan engine, and tons of small improvements. Check out the release notes below for a complete list of changes since Beta 2.
DNS Ping Scans via Open Resolvers
Published on April 2, 2019

Our last post covered some of the ways that Rumble gathers information from DNS services. While working on the tracer implementation, we identified a trick that other folks might find it useful. It turns out that most DNS resolvers do not filter the address ranges they will contact when handling a request, allowing for remote subnet “ping scans” with a little work. This technique isn’t foolproof, and is probably not new, but it may have interesting security implications.

DNS Parlor Tricks for Network Discovery
Published on March 31, 2019

DNS is an amazing protocol. After starting life as a simple mechanism for name resolution, it is now used to enforce TLS rules, prevent email impersonation, authorize users, protect endpoints, enable service discovery, and much more. DNS services run across a range of devices and provide quite a bit of information about the environment, given the right queries. This post describes the techniques used by the Beta 2 version of Rumble Network Discovery to identify DNS services.