1,778 reputation
212
bio website bonsaiviking.com
location
age
visits member for 2 years, 7 months
seen 3 mins ago

1h
answered What does “unknown” status in nmap mean?
Nov
24
comment Choosing TLS / SSL cipher suites - What considerations are there?
You may be interested in my answer to a related question: security.stackexchange.com/a/72932/9209
Nov
14
answered Is TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 a safe cipher suite to use?
Nov
2
comment portscan using nmap fails to return open dhcp-port
@DJake Lots of UDP services are like this, which is why Nmap sends appropriate payloads when possible during the port scan, in order to elicit a response: nmap.org/book/nmap-payloads.html
Oct
21
answered How to bypass tcpwrapped with nmap scan
Oct
16
revised How nmap guesses the operating system?
correct and link the descriptions of the tests
Oct
16
comment How does OS detection work in practice?
The section of the Nmap book on OS detection is very good, too: nmap.org/book/osdetect.html
Oct
16
suggested suggested edit on How nmap guesses the operating system?
Sep
19
answered Does Nmap requires a closed TCP port to do OS fingerprinting?
Sep
10
comment Devices with cryptic names and Chinese ip addresses connected to my router
@JerryA Not very likely. It would be a messy exploit that would mess things up like that. Did it go away when you rebooted the router?
Aug
20
revised Optimal flags to specify when using nmap to guess the OS on remote devices?
Fix bad advice.
Aug
17
answered Why do we use such a redundant language (English) for network communication?
Aug
1
comment My Ipv6 is under attack by the smurf6?
Is this your problem? razzed.com/2009/01/15/…
Jul
28
comment nmap - “No exact OS matches for host (test conditions non-ideal)” even with 1 open, 1 closed port
@MTLPhil maxTimingRatio problems are most likely due to network latency or congestion. VPN is a likely culprit. Nmap usually adapts to network conditions quite well, but one adaptation is slowing down, so your probes may be sent too far apart to be useful for OS detection. Timing options like -T2 are discussed here and the official Nmap book has deep discussion of Nmap's internal timing algorithms.
Jul
26
answered nmap - “No exact OS matches for host (test conditions non-ideal)” even with 1 open, 1 closed port
Jul
25
comment Proxychains + nmap = segmentation fault
I can't reproduce with 6.46 and proxychains 3.1. Please include output of nmap --version and run your command with -d for debugging output. Do you have the same problem if you run directly without proxychains?
Jul
22
answered Is there any difference for OS fingerprint technique used in Nmap inside -A and -O?
Jul
7
answered Identifying HP Printers with NMAP and then using results in Python/Perl
Jun
9
comment What exactly does one get from a Nmap Scan?
As one of the core Nmap developers, I can assure you that in the scan you showed, no ICMP packets were sent. If the target had been on a different link-layer segment (i.e. one or more IP hops away), then ICMP would have been used (among other probes), and no MAC address would be shown. The only way you can get a MAC address and use ICMP for discovery is to add --disable-arp-ping or --send-ip. Even explicitly requesting ICMP Echo with -PE will use ARP for discovery otherwise.
Jun
6
answered What exactly does one get from a Nmap Scan?