1,129 reputation
824
bio website
location
age
visits member for 2 years, 10 months
seen Feb 27 at 3:30

I work as a security analyst. I'm from Australia, although I've recently immigrated to the US and hope to start a small business offering security services.

I have a strong interest and knowledge in different access control models, reading about new exploits and vulnerabilities and digital forensics.


Feb
26
awarded  Nice Question
Dec
18
accepted Determining false positives when scanning for live hosts with Nmap
Dec
17
comment Determining false positives when scanning for live hosts with Nmap
How do you easily show the hosts with at least one port open from a no ping scan, since every host even those with no ports open is marked as up?
Dec
13
asked Is scanning via source ports still relevant/advised?
Dec
13
asked Does it make sense to keep RC4?
Dec
9
asked Verifying NLA support on Remote Desktop
Nov
28
asked Force a specific SSL cipher
Nov
22
revised Determing live hosts past a restrictive firewall with nmap
added 154 characters in body
Nov
22
asked Determing live hosts past a restrictive firewall with nmap
Nov
20
awarded  Notable Question
Nov
20
comment Nmap reporting almost every port as open
@RSchulze yes, I get exactly the same results using -sT
Nov
20
comment Nmap reporting almost every port as open
So I have had a chance to test. Connecting with telnet or netcat on one of the ports said to be open simply returns nothing...nothing at all. --packet-trace seems to just indicate connect success. This happens with -ST as well.
Nov
17
comment Determining false positives when scanning for live hosts with Nmap
For the types of assessments I'm doing ARP is simply irrelevant, and not an option. I'm going to go with what you said in the first part of your answer, and only consider hosts with ports as up.
Nov
15
comment Nmap reporting almost every port as open
Interesting, thank you!
Nov
15
comment Nmap reporting almost every port as open
@RSchulze I will test and see.
Nov
15
comment Nmap reporting almost every port as open
@gowenfawr not all consecutive, and yeah I figure it isn't true, but it kind of makes nmap useless when scanning against such hosts...
Nov
15
comment Nmap reporting almost every port as open
@Lex, that doesn't help. I already verify that the ports are closed, what I want to do is be able to scan and not have to verify each of the 20,000 ports or so.
Nov
15
comment Nmap reporting almost every port as open
it is only triggered by a port scan. What other scanning techniques would you suggest?
Nov
15
comment Nmap reporting almost every port as open
Is there any way to counter this and get accurate results? The ports detected have no service signatures and are just considered open.
Nov
15
comment Nmap reporting almost every port as open
Oh...I did not know that. Good to know.