Security scanner for computers and networks.

learn more… | top users | synonyms

1
vote
1answer
47 views

Nmap not working as a root

Hi I asked this questions on other forums, and searched on google, but nothing was useful to me. My problem works as a non-privileged used, but whenever I run it as a root, I get: Starting Nmap 7.01 (...
2
votes
1answer
62 views

Nmap scan comparison show change in ports

I am going to try explaining my question in the simplest way possible. I have a script which uses nmap to scan for open ports and save the result in a file. The next time it scans a host it moves the ...
2
votes
1answer
17 views

Accessing Nmap flags in Nmap script (NSE)

I'm finishing an Nmap script that needs to create a file as part of the output (an image) which doesn't make sense to print or embed in the standard Nmap output. Currently I'm naming the output image....
0
votes
1answer
72 views

What is the purpose of DNS-based Authentication of Named Entities (DANE) and how does it relate to DNSSEC?

What is the purpose of DNS-based Authentication of Named Entities (DANE)? And how does it relate to the Domain Name System Security Extensions (DNSSEC)? Secondly, how can I verify that DANE is ...
1
vote
3answers
48 views

Can nmap take a list of ports to scan from a file?

Nmap can take a file containing a list of hosts to scan using the -iL flag. Is there similar functionality for a file containing a list of port numbers? I've scoured the man page, online docs at nmap....
7
votes
2answers
445 views

What's the advantage of sending an RST packet after getting a response in a SYN scan?

I'm reading about nmap's SYN scan, and it says Nmap sends an RST immediately after the server tries to establish the handshake. My question is - why bother with the RST? Is it to prevent the server ...
3
votes
0answers
43 views

Preventing Dionaea Service Identification

I've been working on trying to prevent Dionaea service identification using articles such as this. I've managed to disguise most of the ports that dionaea utilizes. However, when scanning with nmap, ...
1
vote
1answer
41 views

Ngrep through router

I want to know if it's possible to capture net traffic through a router. In detail: I'm connected to a local router, which is connected to another router, i want to capture the traffic in the ...
4
votes
2answers
70 views

Sorting hosts via open ports using NMap

I was tasked with running a NMap scan against our corporate network and compiling a list of only live endpoints. My issue is how to go about separating out the hosts via their open ports (printer/...
4
votes
1answer
94 views

Tracking down rogue wireless device on network

I have an unknown device that is connecting to my wifi router, and can't figure out what it is to save my life. I've never seen it before and haven't bought any new devices lately, it seems to have ...
3
votes
2answers
52 views

Is there a form to know the PostgreSQL version using nmap?

I tried using the following command: nmap -p 5432 -v --script pgsql-brute myhost But I got no output related to the pgsql script nor the dbms version.
1
vote
2answers
248 views

Nmap says host down when host is up

I am using nmap 7.12 on Mac OS X. The host that is being scanned is a Linux RHEL server in VirtualBox. I can ping the server and receive ICMP replies and vice versa. I am scanning an IP inside the ...
2
votes
1answer
91 views

Beyond Nmap: Investigating open TCP ports bound to unknown services

I have an uninvited guest using my private WLAN. At first I thought it was probably just a tech-savvy neighbour in need of Internet access, in which case; it wouldn't really bother me. However, I've ...
0
votes
0answers
27 views

Cannot find/create zombie/idle VM

I'm trying to do a "stealthy" net scan using metasploit. The first step is to spoof the ip of a "zombie/iddle" machine in order to not give your own Ip. I try to find a zombie machine on a virtualized ...
2
votes
1answer
89 views

Is this a reasonable approach of continous network monitoring?

I'm currently implementing some mechanisms to continuously monitor our network. Most of this is done through OSSIM but I also extended it by some self written monitoring scripts. Im currently doing ...
1
vote
1answer
266 views

How to use nmap through proxychains?

Iam running nmap through proxychains using this comand proxychains nmap -v scanme.namp.org This produced an error showing like this root@kali:~# proxychains nmap -v scanme.nmap.org ProxyChains-3....
3
votes
1answer
45 views

Nmap snmp-info.nse Security Name

I'm attempting to issue an snmpget request to a device but i'm unable to determine the security name. Running the Nmap snmp-info.nse is successful and no Security Name is required to successfully run ...
0
votes
3answers
63 views

NMAP shows multiple outputs in OS detection

I am experimenting with NMAP in our network as an assignment, and I meant to do OS scan on one specific host 192.168.2.18, for which I chose the following command, nmap -O 192.168.2.18 and I was ...
2
votes
2answers
232 views

How can the nmap tool be used to evade a firewall/IDS?

Some techniques are used to secure the operating system against network attacks e.g.: firewalls, antivirus software, an IDS like SNORT, etc. To take advantage of the nmap tool, is it possible to ...
0
votes
1answer
76 views

Unable to scan live hosts in a home network

I have been trying to scan live hosts that is connected to my home network using nmap but it keeps on returning the IP address of my router and my personal computer. I tried using the following ...
2
votes
1answer
82 views

Samba open ports, not being filtered

nmap scan of my ubuntu computer, output when ran with -sV: 139/tcp open netbios-ssn Samba smbd 3.X (workgroup: MEDIAPC) 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: MEDIAPC)...
1
vote
1answer
41 views

NMAP - Port 4111 XGRID? [closed]

Starting Nmap 7.12 ( https://nmap.org ) at 2016-04-24 10:19 BST Stats: 0:00:27 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan Service scan Timing: About 0.00% done Nmap scan report for ...
1
vote
0answers
76 views

I am hoping someone can shed some light on these nmap scan results

I am concerned that a friends computer may be compromised. They were complaining about the computer getting really hot, difficulty maintaining an online connection, finding unread non junk emails in ...
-1
votes
1answer
83 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
0
votes
1answer
68 views

OS fingerprinting via TCP

I have searched online about this topic and the only information I got is that TCP SYN/ACK can be used to know the type of the target OS. If that is true, I don't understand how this occurs? Does TCP ...
11
votes
5answers
3k views

Why do hackers scan for open ports?

So, whenever you hear of the mean little hackers who hack websites you hear of "port scanning". I understand what it is (looking for all open ports / services on a remote machine), however that begs ...
1
vote
2answers
109 views

Wireshark as a network scanner [closed]

I have been playing with nmap lately, trying out arp-ping scanning and using idle hosts, etc... Looking at Wireshark, there is always some suspicious activity when performing scans. The thing is, I ...
3
votes
2answers
891 views

Nmap through proxy

Using the following command: nmap --proxy socks4://*.*.*.*:25074 -sV -O --reason scanme.nmap.org I'm not sure if nmap is really using the proxy specified Had an idea of scanning "localhost" or "...
0
votes
3answers
90 views

nmap -sP scan question

I'm trying to find the IP of my other computer on the network for penetration testing, but when I do -sP 192.168.1.1/24 I get all hosts are up (up to 255), and it doesn't identify any particular IP ...
2
votes
3answers
42 views

Nmap scan output for other nmap scan

I was wondering if it was possible to output the result of a nmap scan (>, oN/-oX/-oS/-oG, or an other way) in a way that I would be able to import the results for another nmap scan. For example, ...
1
vote
0answers
62 views

Port scanning on server

My use case is to check open ports on multiple servers, so when I try: nmap -iL list.txt then nmap only scans for some particular ports whether they are open or closed, but when I try: namp -p 1-...
1
vote
2answers
366 views

Missing scripts in NMAP

I've just installed the latest Kali and updated everything. nmap is version 7.12. I've noticed that smb-check-vulns.nse is not present. As far as I can tell, most other scripts I use are there but I'...
3
votes
1answer
178 views

Scanning private IPs from outside network

Is it possible with Nmap (or other tool) to scan a range of private IPs (let's say 10.0.0.0/8) but being outside any private network (using those IPs) ?
5
votes
1answer
138 views

Nmap doesn't scan the whole range of IPs

I have multiple machines on my home network with a range of private IPs from 10.0.0.0 to 10.255.255.255. When I scan the network, I use: nmap -v 10.0.0.0/8 But the console shows this: Starting ...
1
vote
1answer
79 views

How can I detect the remote operating system?

Is it possible to detect the operating system type remotely from another system using any tools like nmap without admin privileges? What are the other alternatives for achieving this?
1
vote
2answers
74 views

Scanning a Foreign Network for Active Hosts using Nmap or Hping3

I Have a Router setup at my home. I Just have a private IP. I wanted to scan for active hosts on my network. When I do it locally, I use, Nmap, nmap -sn -v x.x.x.* So, is their any way to do it ...
1
vote
2answers
16 views

How do I ask nmap to probe designated service type, and do not run scripts?

I would like to probe if a port is running socks or squid service, but nmap runs all service probes by default, can I change that? Also from the debug output, there's a NSE script pre-scanning, can I ...
3
votes
1answer
31 views

Why can't nmap identify the danted(socks5) service on non-standard port?

I'm testing nmap's abilities, I started a socks5 proxy server with danted, and started it on port 10090 I tried the following command, and expect it to tell me port 10090 runs a socks server, nmap ...
1
vote
1answer
233 views

Using nmap to bypass a firewall and perform OS fingerprinting

How can I use nmap to perform operating system detection on a system which has all of its ports filtered by a firewall? Is there a way to bypass it? I have tried: syn scan, xmas scan, fragment scan,...
2
votes
4answers
661 views

With Nmap it is possible to scan according mac address?

I would like to know if it's possible to use Nmap in order to scan hosts according to their mac address. Or if it's not possible to do it directly, is there an option (i didn't find) to select only ...
4
votes
1answer
91 views

Armitage check exploit

I am with all fairness not the most experienced penetration tester, I am doing an industry placement where I can improve my skills. I am using Armitage in Kali Linux to check for vulnerabilities in ...
5
votes
2answers
95 views

Nmap update - SSL/TLS ciper strength indication

Previously with nmap I found it easy to understand the strengths of ciphers noted by the tool (strong, weak...) However this has now changed to a rating of A-F. What does this mean and why did they ...
1
vote
2answers
105 views

Nmap scan report with all port status

Is there a way to ask nmap to print the final scan report with the state of all ports tested and the reason? For example when the scan is launched with --reason : Nmap scan report for 127.0.0.1 ...
3
votes
2answers
101 views

All ports are unfiltered

I'm currently studying a peneteration/hacking course. I am trying to use nmap against a target to find all the ports that are filtered. I thought if I used an ACK-scan nmap would give me all the ...
-1
votes
2answers
127 views

Nmap - host discovery doesn't show all hosts

I tried to scan my network for hosts. However, it seems like it didn't scan the MAC. I tried all kinds of TCP and UDP scans on different kind of ports but the hosts doesn't show up. It's strange ...
3
votes
0answers
34 views

NMAP host discovery reporting discrepant results between NAT and Bridged mode

I figured this would be the most relevant place to ask this question. I'm using a Kali VM to run some network scans. The results are different depending on whether my network interface is bridged or ...
0
votes
1answer
190 views

Block OS fingerprinting without using iptables?

I have a Linux machine connected to a Windows 98 PC on port 104. Now I want to block the OS fingerprinting using nmap for the windows 98 PC. I tried using iptables (blocking that particular port) but ...
2
votes
1answer
54 views

How to perform an idle scan against a target using Nmap with a list of zombies? [closed]

I want to perform port scan against a target but the firewall at the target only allows traffic to the ports through certain IP address/machines. I tried to perform an idle scan in Nmap but it only ...
1
vote
1answer
51 views

How can I know why Nmap identified a service or OS the way it did?

Nmap uses a variety of testing methods and fingerprints to determine - or at least guess at - what services are running on each discovered port, and what operating system is running on the host. (When ...
3
votes
1answer
452 views

Detecting POODLE and BEAST using nmap

Need your expert advice for the following - POODLE - We can deduce if a server is vulnerable to poodle if it supports sslv3 protocol and uses CBC Ciphers. BEAST - Any server supporting sslv3 OR TLS ...