1,621 reputation
212
bio website bonsaiviking.com
location
age
visits member for 2 years, 4 months
seen 10 hours ago

Aug
20
revised Optimal flags to specify when using nmap to guess the OS on remote devices?
Fix bad advice.
Aug
17
answered Why do we use such a redundant language (English) for network communication?
Aug
1
comment My Ipv6 is under attack by the smurf6?
Is this your problem? razzed.com/2009/01/15/…
Jul
28
comment nmap - “No exact OS matches for host (test conditions non-ideal)” even with 1 open, 1 closed port
@MTLPhil maxTimingRatio problems are most likely due to network latency or congestion. VPN is a likely culprit. Nmap usually adapts to network conditions quite well, but one adaptation is slowing down, so your probes may be sent too far apart to be useful for OS detection. Timing options like -T2 are discussed here and the official Nmap book has deep discussion of Nmap's internal timing algorithms.
Jul
26
answered nmap - “No exact OS matches for host (test conditions non-ideal)” even with 1 open, 1 closed port
Jul
25
comment Proxychains + nmap = segmentation fault
I can't reproduce with 6.46 and proxychains 3.1. Please include output of nmap --version and run your command with -d for debugging output. Do you have the same problem if you run directly without proxychains?
Jul
22
answered Is there any difference for OS fingerprint technique used in Nmap inside -A and -O?
Jul
7
answered Identifying HP Printers with NMAP and then using results in Python/Perl
Jun
9
comment What exactly does one get from a Nmap Scan?
As one of the core Nmap developers, I can assure you that in the scan you showed, no ICMP packets were sent. If the target had been on a different link-layer segment (i.e. one or more IP hops away), then ICMP would have been used (among other probes), and no MAC address would be shown. The only way you can get a MAC address and use ICMP for discovery is to add --disable-arp-ping or --send-ip. Even explicitly requesting ICMP Echo with -PE will use ARP for discovery otherwise.
Jun
6
answered What exactly does one get from a Nmap Scan?
Jun
6
comment What exactly does one get from a Nmap Scan?
Nothing in that output indicates response to ICMP packets. The fact that you see a MAC address indicates Nmap probably used ARP requests to determine the host was up. You can add --reason to see this for certain.
May
5
answered A tiny version of wget (51 bytes?)
Apr
22
answered Devices with cryptic names and Chinese ip addresses connected to my router
Apr
22
comment How can I create a password that says “SALT ME!” when hashed?
Rainbow tables don't store all the hashes, so you can't just "search through them". They are a specific compression format for finding plaintext for particular whole input hashes, so you'd have to keep generating "satisfactory" hashes until you got one with a "real" plaintext.
Apr
18
awarded  Yearling
Apr
18
comment Nmap SSL service detection: How to check all open ports only for SSL service?
@Benny Comment addressed in edited answer.
Apr
18
revised Nmap SSL service detection: How to check all open ports only for SSL service?
address comment
Apr
17
answered Nmap SSL service detection: How to check all open ports only for SSL service?
Apr
17
awarded  Revival
Apr
3
answered Is it possible to use a .Net payload with metasploit?