{% extends "base.html" %} {% block title %}Settings - Hermetic Suite{% endblock %} {% block content %}
Configure scanner behavior and profiles
{{ config.NMAP_PATH }}
{{ config.VERSION | default('1.0.0') }}
These capabilities are configured during installation via setup.sh.
To change them, update /etc/sudoers.d/hsuite and /opt/hsuite/.env.
| Capability | Status | Description |
|---|---|---|
| Sudo nmap | {% if system_capabilities.nmap_sudo %} Enabled {% else %} Disabled {% endif %} | Run nmap with elevated privileges for TTL-based host type detection (load balancers, network devices) |
| Self-restart | {% if system_capabilities.self_restart %} Enabled {% else %} Disabled {% endif %} | Allow Hermetic Suite to restart itself after plugin updates (via systemctl) |
echo "hsuite ALL=(ALL) NOPASSWD: /usr/bin/nmap" | sudo tee -a /etc/sudoers.d/hsuiteecho "hsuite ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart hsuite" | sudo tee -a /etc/sudoers.d/hsuiteNMAP_USE_SUDO=true and/or SELF_RESTART_ENABLED=true to /opt/hsuite/.envsudo systemctl restart hsuiteConfigure SMTP settings for email notifications from plugins. Users can set their email address in their profile to receive alerts.
| Name | Type | Ports | nmap Args | Timeout | Actions |
|---|---|---|---|---|---|
|
{{ profile.name }}
{% if profile.description %}
{{ profile.description }} {% endif %} |
{{ profile.scan_type.value }} | {{ profile.port_range }} |
{{ profile.nmap_args }} |
{{ profile.timeout_per_host }}s |
No scan profiles configured. Add one to customize your scans.
{% endif %}| Name | Type | Fingerprint | Default | Created | Actions |
|---|---|---|---|---|---|
| {{ key.name }} | {{ key.key_type }} |
{{ key.fingerprint or 'N/A' }} |
{% if key.is_default %} Default {% else %} {% endif %} | {{ key.created_at.strftime('%Y-%m-%d') }} |
No SSH keys configured. Add a key to enable authenticated scanning.
{% endif %}| Username | Role | Status | Last Login | Actions | |
|---|---|---|---|---|---|
| {{ user.username }} | {{ user.email or '-' }} | {{ 'Admin' if user.is_admin else 'User' }} | {{ 'Active' if user.is_active else 'Disabled' }} | {{ user.last_login.strftime('%Y-%m-%d %H:%M') if user.last_login else 'Never' }} | {% if user.username != current_user.username %} {% else %} (you) {% endif %} |
No users found.
{% endif %}| Argument | Description |
|---|---|
-sV | Service version detection |
-sC | Run default NSE scripts |
-O | OS detection (requires root) |
-sS | TCP SYN scan (stealthy, requires root) |
-sT | TCP connect scan (no root required) |
-sU | UDP scan (slow) |
-A | Aggressive scan (OS, version, scripts, traceroute) |
-T4 | Timing template (0-5, higher = faster) |
--script vulners | Use vulners.com vulnerability database |