Security scanner for computers and networks.

learn more… | top users | synonyms

4
votes
2answers
599 views

Detect what is running on an open port?

I have a wireless camera in my network. Running nmap on the camera, I discovered that the port 1010 is open but I could not find what it is used for. I looked in the administration pannel and did not ...
4
votes
5answers
897 views

How to bypass Nmap blockage?

I rent a server, and my provider seems to be blocking nmap. Is there any other tools I could use to test my home network from the outside? Also, does blocking nmap on a network provide any security? ...
3
votes
2answers
913 views

OS Fingerprinting for Android

Are traditional OS-fingerprinting techniques effective in identifying Android smartphones (OS version) on a network. From my research I found most Android network mappers can be only run from Android ...
4
votes
3answers
351 views

Are there any example domains where I can run my nmap scans just to learn?

I want to learn nmap and its various options. Are there any example domains which purposefully have security holes to facilitate learning nmap?
-2
votes
1answer
1k views

What does -Pn option mean in nmap? [closed]

I am trying to do a nmap scan on a machine in my home network. When I do the regular scan (using nmap 192.168.2.10 or nmap -sP 192.168.2.10), the results say host is down. However, when I use the ...
0
votes
4answers
502 views

NMAP scan fails

I started to read a metasploit guide book so I set up 2 Machines in VirtualBox for pen testing (host - BT 5, the second - WinXP SP2). When Im trying to scan open ports with NMAP on the Windows ...
1
vote
2answers
808 views

How do I find a target on the wired network, from an attack system on Wi-Fi?

I'm trying to practice penetration testing on my home network. The target system is my desktop computer, which is connected to the network via ethernet cable. The attack system is my laptop, which is ...
-1
votes
5answers
923 views

Can I scan with nmap from cloud services? [closed]

Can i conduct nmap scanning from cloud services (i.e AWS)? i am looking to do external scanning for my company and want to set up something that will be quick, efficient, and cheap. I dont want to ...
2
votes
1answer
88 views

nmap: why is it “silly” to combine OS finding option (-O) with bounce scan (-b)

If you run an Nmap FTP bounce scan with nmap -O -b, nmap will do the scan, but it says that the scan "seems silly" before it starts. Why would the scan be silly? It actually appears to report a ton ...
0
votes
3answers
389 views

Some issues with iptables and nmap

When I scan my pc with nmap I see only one open port. I didn't define any rule in iptables so if I'm not mistaken, all connections should be denied by default. However I can use HTTP or SSH, so that ...
2
votes
5answers
589 views

OS fingerprinting: can I rely on the results?

Using nmap -O www.example.com I get: Running (JUST GUESSING): Microsoft Windows 7|2008 (90%) So I can say the target site is running Windows. Using xprobe2 -v www.example.com, I'm just astonished ...
1
vote
3answers
822 views

How to find the OS of the target machine

I am new to this field. Currently I am using Linux OS and my question is how can I find the OS of another machine to which I do not have a direct access. I am interested in any possibilities which ...
0
votes
3answers
158 views

How to retrieve a site whose server is running Linux

I'm struggling to find a way to retrieve through Google a list of sites having Linux as their server operating system. Actually, I'd like to be able to test the following command: nmap -O ...
3
votes
2answers
206 views

are there any services to test nmap

While playing with nmap, I have started to wonder: are there any ip addresses which were specifically made to learn how to use nmap. (As far as I understood I can not just scan any ip address, ...
1
vote
1answer
479 views

What are the best Nmap Scripting Engine (NSE) service discovery scripts? [closed]

Using nmap -sV can be quite verbose can -sU can take a very long time especially with -p 0-65535. To narrow your results and enumerate interesting services the wealth of NSE scripts can be very ...
2
votes
1answer
3k views

Scan multicast IP range on specific port using nmap

I'd like to scan a multicast IP range on a specific port using nmap. When I try to simply do a nmap -p 10000 239.35.0.0/16, it just responds with an error stating Strange error from connect ...
3
votes
2answers
323 views

Which ports are potential security risks for nmap?

I'm using nmap and I am having trouble finding which ports are dangerous and pose the greatest security risks. Which ports are potential security risks for nmap? I was thinking samba, telnet, vnc ...
1
vote
1answer
1k views

Nmap port scan and FTP bounce

Suppose that there is a network of machines, and there is a server with ftp server that allows ftp bounce. I do a nmap scan on the network nmap -sC -some other parameters network address. Does nmap ...
5
votes
2answers
874 views

How can I use nmap to distinguish between a normal linux machine and an android device?

According to this link: here, nmap 5.2 onwards is now supposed to detect android smartphones. I am using nmap 6.01 but it only identifies android devices as running a linux kernel.
3
votes
1answer
3k views

Nmap scan produces all “unknown”

I scanned both localhost, and the IP address of the LAN adapter, and this is the produced output. Starting Nmap 5.51 ( http://nmap.org ) at 2012-10-12 18:06 Eastern Daylight Time Skipping SYN Stealth ...
1
vote
2answers
274 views

Changing IP ID generation of a server

I've seen plenty about Idle Scans and incremental IP IDs on the net, but I have trouble finding a "solution" to the problem. Is there a way to "set" IP IDs for example to all zeros or is it coded into ...
4
votes
4answers
1k views

How can I scan open ports without being traced back

I would like to scan open ports of a server. But as far as I know, when I try to scan the open ports with something like nmap in shell they would be able to trace me. Is there a way to secure this ...
1
vote
2answers
113 views

Correct way of establishing if the switch is sending syslogs?

I want to confirm through scanning means if the switch is sending syslog packets or not. What i did was run a nmap scan nmap -sV -p514 xxx.xx.xx.xx The result came out as closed. Does this ...
1
vote
2answers
1k views

Found Unusual Services running on my VPS

I am running a Debian VPS and i did a port scan and found these services 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 593/tcp filtered http-rpc-epmap 1720/tcp ...
6
votes
2answers
3k views

Scanning my network with NMAP

Each computer is assigned one ip address on my network, and my ISP supplies one IP for my network. If I try to scan the ip supplied by my ISP what I got is the OS running on the router, running on the ...
7
votes
4answers
5k views

How to detect hosts running in virtual machines with nmap?

I have to determine if a given subnet has virtual hosts. Are there any ideas about what switches to use?
3
votes
2answers
5k views

Could Nmap scan switches/routers

Nmap can scan and sometimes successfully detect the running OS in the remote host. However, can nmap scan routers and switches? Most of them use an embedded system.
5
votes
4answers
919 views

Persisting and comparing NMAP scans

Does anyone have any good recommendations on a good tool for persisting NMAP scans to database? It may be a tool for persisting or simply a java library for easy parsing of the nmap xml scan result ...
0
votes
2answers
383 views

is it possible to test out remote host by using nmap?

I was trying to test out my friend's computer (with agreement) by using nmap remotely. But the result I got seems kinda awkward to me. It only showed 1900 as tcpwrapper and all other ports were no ...
1
vote
2answers
89 views

NMAP SSMTP Service Detection

When I examined a NMAP -sV scan on a host running Exim on port 465, it uses the standard SYN scan to determine if the port is open, and then issues a Client Hello to which the server responds with a ...
0
votes
1answer
320 views

NMAP Commands Used in Option -A

I've found that using the command nmap -A gives me the most reliable results and according to the reference guide the option -A includes service detection, traceroute, and OS detection. I want to do ...