Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [host-discovery]

It is the phase of a penetration test where a network scanning tool is used to find out the live hosts on a network.

1
vote
0answers
132 views

Why ever “trust” Nmap's reverse lookup for system hostname when doing host discovery?

Quick question. I was scanning a lab network with Nmap just doing host discovery to see what hosts were out there. I got a list of hosts, ips, hostnames, ports open, services, etc. Upon further ...
0
votes
1answer
303 views

Replace Nmap with Nessus

I have to replace NMAP with Nessus. I got answer for few settings, but there are few settings in NMAP for which I am not able to get answer. If you could answer me, it would be helpful. For example, ...
3
votes
2answers
2k views

Best practice to discover network hosts?

I'm creating a python networking program and need to discover all the usable hosts on the network such as phones and desktops on Linux. What works better, NMAP, Arp-Scan, arp, or something else? I've ...
5
votes
2answers
549 views

How to scan 20k hosts to check if they're up? [closed]

I have a list of about 20000 hostnames and I need to check which ones are up. I would say 98% of them are down. I have already tried powershell and python scripts without much success (couldn't set a ...
0
votes
2answers
413 views

nmap Not Working with CIDR Notation on LAN

I'm doing a simple host discovery on my LAN and noticed that CIDR notation does not report any hosts. I scoured man nmap with no findings in differences between using a CIDR range and any other range. ...
4
votes
1answer
370 views

Get Device names of surrounding WIFI devices without authentication

I am looking to get a list of devices which are in range of my Wifi antenne (monitor mode). For example: "Tom's Iphone" I can get the MAC's of these devices, but is it possible to get the name of ...
3
votes
2answers
5k views

nmap to scan all resolved ip addresses for a given domain name?

I'm using nmap to scan a given domain name example.com, which resolves to 2 ip addresses, then nmap chooses only one ip address to scan for example: #nmap -vv -sV scanme.nmap.org Starting Nmap 7.01 (...
3
votes
1answer
1k views

NMAP discovery scan reporting host offline, pinging the same host gets ICMP responses

I ran an nmap -sn scan on a host, and nmap reported the host as down. I then pinged the same host with ping and got ICMP responses. I'm confused, because I was sure that -sn among other things, did an ...
0
votes
2answers
923 views

Security scan with, or without, IP whitelisting in the firewall and isn't that introducing a weak point?

In case of an automated security scan is it more desirable to get the scanner IP addresses whitelisted in order to possibly find vulnerabilities behind the firewall, or to scan in front of/against the ...
8
votes
1answer
325 views

Strange responses from an unfamiliar HTTP server

I noticed an unfamiliar device when scanning my local wireless network. It had two open (listening?) TCP ports; TCP/80 (http?) & TCP/443 (https?). In an effort to identify the unfamiliar device;...
2
votes
2answers
1k views

Is an ARP scan stealthy?

If you want to discover the live hosts on your subnetwork how can you exploit the ARP protocol in order to scan stealthily? Would an arp scan be picked up as suspicious activity? Could you spoof ...
3
votes
1answer
115 views

How to discover technologies?

When I audit a service I come across the problem I have to figure out what is the product a website is using, to search for possible vulnerabilities afterwards. What I do is to look for server ...
-1
votes
3answers
3k views

Nmap - host discovery doesn't show all hosts

I tried to scan my network for hosts. However, it seems like it didn't scan the MAC. I tried all kinds of TCP and UDP scans on different kind of ports but the hosts doesn't show up. It's strange ...
5
votes
2answers
589 views

NMAP host discovery reporting discrepant results between NAT and Bridged mode

I figured this would be the most relevant place to ask this question. I'm using a Kali VM to run some network scans. The results are different depending on whether my network interface is bridged or ...
7
votes
1answer
1k views

Exploring unknown service

I'm fairly new to network stuff and currently exploring a Wi-Fi radio device in my home network. In this process I noticed an open port. 58028/tcp open unknown 1 service unrecognized despite ...
1
vote
1answer
408 views

Bypass Text Plain Rule

I want to know if I can allow uploading all types of scripts and add these rules to a virtual host configuration; so please advise and tell me if there will be some exploits that can be used to ...
2
votes
3answers
6k views

Determining false positives when scanning for live hosts with Nmap

When doing a vulnerability assessment on a large network, it seems general practice to determine which hosts on the network are live. This can be done in various ways. From what I have read it is ...
236
votes
9answers
903k views

How to find live hosts on my network?

I am trying to find the live hosts on my network using nmap. I am scanning the network in Ubuntu using the command sudo nmap -sP 192.168.2.1/24. However, I am unable to find the live hosts. I just get ...