Security scanner for computers and networks.

learn more… | top users | synonyms

0
votes
2answers
51 views

Nmap says host down, but host is up

I am using nmap 7.12 on Mac OS X. I haven’t been able to find a solution to my issue. The host that is being scanned is a Linux RHEL server in VirtualBox. I can ping the server and receive ICMP ...
1
vote
0answers
14 views

Is there a form to know the PostgreSQL version using nmap?

I tried using the following command: nmap -p 5432 -v --script pgsql-brute myhost But I got no output related to the pgsql script nor the dbms version.
1
vote
1answer
50 views

Samba open ports, not being filtered

nmap scan of my ubuntu computer, output when ran with -sV: 139/tcp open netbios-ssn Samba smbd 3.X (workgroup: MEDIAPC) 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: ...
1
vote
2answers
116 views

Using nmap to bypass a firewall and perform OS fingerprinting

How can I use nmap to perform operating system detection on a system which has all of its ports filtered by a firewall? Is there a way to bypass it? I have tried: syn scan, xmas scan, fragment ...
0
votes
1answer
75 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
1
vote
1answer
52 views

Beyond Nmap: Investigating open TCP ports bound to unknown services.

I have an uninvited guest using my private WLAN. At first I thought it was probably just a tech-savvy neighbour in need of Internet access, in which case; it wouldn't really bother me. However, I've ...
3
votes
1answer
124 views

Scanning private IPs from outside network

Is it possible with Nmap (or other tool) to scan a range of private IPs (let's say 10.0.0.0/8) but being outside any private network (using those IPs) ?
1
vote
1answer
111 views

NMAP Scan Returns Odd OS Detection [closed]

I am new to NMAP but I was using it to troubleshoot some issues I have been having. I ran a scan on a device and I know the device runs some sort of Linux or Ubuntu OS and I was attempting to figure ...
0
votes
0answers
26 views

Cannot find/create zombie/idle VM

I'm trying to do a "stealthy" net scan using metasploit. The first step is to spoof the ip of a "zombie/iddle" machine in order to not give your own Ip. I try to find a zombie machine on a virtualized ...
1
vote
1answer
76 views

Is this a reasonable approach of continous network monitoring?

I'm currently implementing some mechanisms to continuously monitor our network. Most of this is done through OSSIM but I also extended it by some self written monitoring scripts. Im currently doing ...
104
votes
4answers
309k views

How to find live hosts on my network?

I am trying to find the live hosts on my network using nmap. I am scanning the network in Ubuntu using the command sudo nmap -sP 192.168.2.1/24. However, I am unable to find the live hosts. I just get ...
3
votes
2answers
69 views

All ports are unfiltered

I'm currently studying a peneteration/hacking course. I am trying to use nmap against a target to find all the ports that are filtered. I thought if I used an ACK-scan nmap would give me all the ...
2
votes
1answer
24 views

Nmap snmp-info.nse Security Name

I'm attempting to issue an snmpget request to a device but i'm unable to determine the security name. Running the Nmap snmp-info.nse is successful and no Security Name is required to successfully run ...
1
vote
1answer
70 views

How to use nmap through proxychains?

Iam running nmap through proxychains using this comand proxychains nmap -v scanme.namp.org This produced an error showing like this root@kali:~# proxychains nmap -v scanme.nmap.org ...
0
votes
4answers
232 views

VM Kali Linux - nmap why is so slow? [closed]

I was scanning an IP using this command: nmap -sT -p- -Pn <Ip_Address>, but is very slow scanning. To reach 100%, the command line said 3 hours remaining. Why is it so slow?
5
votes
2answers
144 views

Stop Nmap scan and preserve XML output

Every time I run Nmap I use the -oA flag. The XML output is an important output item as I feed it into a number of parsers plus Metasploit with db_import. The --resume option can resume a scan but it ...
0
votes
1answer
110 views

Block OS fingerprinting without using iptables?

I have a Linux machine connected to a Windows 98 PC on port 104. Now I want to block the OS fingerprinting using nmap for the windows 98 PC. I tried using iptables (blocking that particular port) but ...
0
votes
3answers
41 views

NMAP shows multiple outputs in OS detection

I am experimenting with NMAP in our network as an assignment, and I meant to do OS scan on one specific host 192.168.2.18, for which I chose the following command, nmap -O 192.168.2.18 and I was ...
0
votes
1answer
48 views

Unable to scan live hosts in a home network

I have been trying to scan live hosts that is connected to my home network using nmap but it keeps on returning the IP address of my router and my personal computer. I tried using the following ...
1
vote
2answers
100 views

How can the nmap tool be used to evade a firewall/IDS?

Some techniques are used to secure the operating system against network attacks e.g.: firewalls, antivirus software, an IDS like SNORT, etc. To take advantage of the nmap tool, is it possible to ...
8
votes
4answers
9k views

How to detect hosts running in virtual machines with nmap?

I have to determine if a given subnet has virtual hosts. Are there any ideas about what switches to use?
1
vote
1answer
30 views

NMAP - Port 4111 XGRID? [closed]

Starting Nmap 7.12 ( https://nmap.org ) at 2016-04-24 10:19 BST Stats: 0:00:27 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan Service scan Timing: About 0.00% done Nmap scan report for ...
1
vote
0answers
56 views

I am hoping someone can shed some light on these nmap scan results

I am concerned that a friends computer may be compromised. They were complaining about the computer getting really hot, difficulty maintaining an online connection, finding unread non junk emails in ...
1
vote
4answers
1k views

Printer IP scanning via Nmap

I want to scan printer IPs in my organization. Is there authentic method? I am using Nmap. I have already checked some commands like: 1) nmap -O 10.10x.x.0/24 -oG - | grep printer >> outfile ...
0
votes
1answer
58 views

OS fingerprinting via TCP

I have searched online about this topic and the only information I got is that TCP SYN/ACK can be used to know the type of the target OS. If that is true, I don't understand how this occurs? Does TCP ...
11
votes
5answers
3k views

Why do hackers scan for open ports?

So, whenever you hear of the mean little hackers who hack websites you hear of "port scanning". I understand what it is (looking for all open ports / services on a remote machine), however that begs ...
3
votes
2answers
199 views

Nmap through proxy

Using the following command: nmap --proxy socks4://*.*.*.*:25074 -sV -O --reason scanme.nmap.org I'm not sure if nmap is really using the proxy specified Had an idea of scanning "localhost" or ...
1
vote
2answers
57 views

Wireshark as a network scanner [closed]

I have been playing with nmap lately, trying out arp-ping scanning and using idle hosts, etc... Looking at Wireshark, there is always some suspicious activity when performing scans. The thing is, I ...
4
votes
2answers
1k views

different results using nmap with/without sudo

What is the reason that after running: $ nmap -sP 192.168.1.0/24 I got 3 results, but running: $ sudo nmap -sP 192.168.1.0/24 shows 7 results. What is the role of using sudo here?
2
votes
3answers
29 views

Nmap scan output for other nmap scan

I was wondering if it was possible to output the result of a nmap scan (>, oN/-oX/-oS/-oG, or an other way) in a way that I would be able to import the results for another nmap scan. For example, ...
0
votes
3answers
64 views

nmap -sP scan question

I'm trying to find the IP of my other computer on the network for penetration testing, but when I do -sP 192.168.1.1/24 I get all hosts are up (up to 255), and it doesn't identify any particular IP ...
8
votes
2answers
5k views

How does nmap do a zombie and decoy scan?

We're learning nmap in my ethical hacking class. We got showed how we can use nmap to perform a zombie scan: nmap -PN -sI zombieIP targetIP and decoy scan: nmap -p 135 -D decoyIP targetIP I ...
0
votes
2answers
100 views

Missing scripts in NMAP

I've just installed the latest Kali and updated everything. nmap is version 7.12. I've noticed that smb-check-vulns.nse is not present. As far as I can tell, most other scripts I use are there but ...
1
vote
0answers
47 views

Port scanning on server

My use case is to check open ports on multiple servers, so when I try: nmap -iL list.txt then nmap only scans for some particular ports whether they are open or closed, but when I try: namp -p ...
2
votes
4answers
210 views

With Nmap it is possible to scan according mac address?

I would like to know if it's possible to use Nmap in order to scan hosts according to their mac address. Or if it's not possible to do it directly, is there an option (i didn't find) to select only ...
7
votes
5answers
31k views

How to bypass tcpwrapped with nmap scan

I'd a scan task and I faced following result Host is up (0.032s latency). Scanned at 2012-10-25 16:06:38 AST for 856s PORT STATE SERVICE VERSION 1/tcp open tcpwrapped 3/tcp open ...
5
votes
1answer
103 views

Nmap doesn't scan the whole range of IPs

I have multiple machines on my home network with a range of private IPs from 10.0.0.0 to 10.255.255.255. When I scan the network, I use: nmap -v 10.0.0.0/8 But the console shows this: Starting ...
1
vote
1answer
51 views

How can I detect the remote operating system?

Is it possible to detect the operating system type remotely from another system using any tools like nmap without admin privileges? What are the other alternatives for achieving this?
1
vote
1answer
48 views

How can I know why Nmap identified a service or OS the way it did?

Nmap uses a variety of testing methods and fingerprints to determine - or at least guess at - what services are running on each discovered port, and what operating system is running on the host. (When ...
1
vote
2answers
48 views

Scanning a Foreign Network for Active Hosts using Nmap or Hping3

I Have a Router setup at my home. I Just have a private IP. I wanted to scan for active hosts on my network. When I do it locally, I use, Nmap, nmap -sn -v x.x.x.* So, is their any way to do it ...
5
votes
1answer
920 views

Firewalk through a Firewall on our subnet

Having trouble firewalking. I am trying to determine all the open ports on my firewall/gateway. Here is my lab network diagram: (Skip to the bottom of the following explanation for a direct list of ...
1
vote
2answers
15 views

How do I ask nmap to probe designated service type, and do not run scripts?

I would like to probe if a port is running socks or squid service, but nmap runs all service probes by default, can I change that? Also from the debug output, there's a NSE script pre-scanning, can I ...
3
votes
1answer
29 views

Why can't nmap identify the danted(socks5) service on non-standard port?

I'm testing nmap's abilities, I started a socks5 proxy server with danted, and started it on port 10090 I tried the following command, and expect it to tell me port 10090 runs a socks server, nmap ...
5
votes
2answers
79 views

Nmap update - SSL/TLS ciper strength indication

Previously with nmap I found it easy to understand the strengths of ciphers noted by the tool (strong, weak...) However this has now changed to a rating of A-F. What does this mean and why did they ...
4
votes
1answer
74 views

Armitage check exploit

I am with all fairness not the most experienced penetration tester, I am doing an industry placement where I can improve my skills. I am using Armitage in Kali Linux to check for vulnerabilities in ...
1
vote
2answers
69 views

Nmap scan report with all port status

Is there a way to ask nmap to print the final scan report with the state of all ports tested and the reason? For example when the scan is launched with --reason : Nmap scan report for 127.0.0.1 ...
2
votes
1answer
435 views

What is the fastest way to scan all ports of a single machine

I am doing some research and I need a very quick way to scan for open ports on a single machine. To provide some context, I know that my machine will have a port open waiting for UDP packets for about ...
-1
votes
2answers
73 views

Nmap - host discovery doesn't show all hosts

I tried to scan my network for hosts. However, it seems like it didn't scan the MAC. I tried all kinds of TCP and UDP scans on different kind of ports but the hosts doesn't show up. It's strange ...
3
votes
0answers
29 views

NMAP host discovery reporting discrepant results between NAT and Bridged mode

I figured this would be the most relevant place to ask this question. I'm using a Kali VM to run some network scans. The results are different depending on whether my network interface is bridged or ...
2
votes
2answers
460 views

nmap says “variable 'keys' is not declared” when trying to run ssl-ccs-injection.nse

I'm running nmap 6.47 on Windows 7 and am trying to run the ssl-ccs-injection.nse script. After getting an error, I ran it with the -d (debug) option and the error in the subject is what showed up. I ...