We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [network-scanners]

Programs that map out a network to figure out which computers and services are available to be exploited.

Filter by
Sorted by
Tagged with
2
votes
0answers
53 views

Where to run long automated scans? [closed]

I'm trying to run some automated scans without stopping for long periods of time (each scan can take anywhere from 8 hours to 3 days). I currently don't have a PC I can leave running for many days ...
1
vote
0answers
36 views

Router reboots when doing port scan [closed]

This question is very much related to Router reboots when using Nmap, the difference is that I'm actually interested in a practical solution to this problem. I have a piece of C code that is doing ...
-4
votes
1answer
161 views

Pentesting: Active vs Passive Scan [closed]

I couldn't find answers to this question on this forum so I'm just gonna ask: What are Active Scans and Passive Scans? What are their differences? Please include in your answer(s): differences in ...
-2
votes
2answers
186 views

Did I just find a bug in CloudFlare or is this a feature?

While doing penetration testing for a client I stumbled upon a security incident. CloudFlare promises to hide the origin IP address when using its DNS. I went to dnsdumpster.com, inputted my client's ...
0
votes
1answer
81 views

Nmap scan slow on some IP ranges [closed]

I'm a security newbie trying to scan a VPN in the range 10.0.0.0 - 10.0.15.254 using nmap on Kali Linux. The routing table: route -n Kernel IP routing table Destination Gateway Genmask ...
0
votes
0answers
77 views

Port scanning - Idle scan 2.0?

I have some server applications and from time to time I'm being victim of some attacks which might be of interest and I'm going to describe in the following. The most recent attack originated from ...
0
votes
1answer
97 views

Firebase ports scanning using nmap

Purely for research purposes used nmap to check security of my application deployed to Firebase. However, there some questions which I can't understand: Why Firebase has open so many ports? Something ...
0
votes
1answer
178 views

Malicious IP addresses [closed]

I am looking for updated lists of IP addresses that belong to malware's C&C, botnets, malicious scanners, or other sort of malicious activities. Is there any public database of malicious IP ...
0
votes
1answer
90 views

Hardening against Nmap and other network scanners

It is possible to make Server respond with irrelevant data if it is scanned with Nmap? If yes, are there any examples of such SW?
0
votes
2answers
116 views

Can wireshark capture the exact payload and end point of API used by my Mobile APP?

I was just wondering if someone having total control over his/her network, is running my mobile app. Also wireshark is capturing all requests made using the network. My app is calling API endpoint ...
0
votes
1answer
83 views

Incorrect results via Nexpose, but displaying correct one with Nmap

We are scanning our network via Nexpose. Recently an asset was found vulnerable to Wannacry CVE 2017-0146 SMB Remote code execution vulnerability. However when i have tested it same through Nmap it ...
1
vote
0answers
512 views

How secure is my apartment's building wide wifi network using Spectrum Community Solutions?

Recently my apartment moved from having individual modems (with our own router/wifi network) to this Spectrum Community Solutions building wide network. Everyone can connect to the network anywhere, ...
-1
votes
1answer
67 views

Finding location of malicious internal IP in Wide Area Network [closed]

Malicious Traffic detected from an internal IP in Wide Area Network (Network of multiple cities in a country). How to find the city of that IP address in Wide Area Network? There is no IP subnet by ...
-1
votes
1answer
123 views

How to find out which application runs behind port 31337?

I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels. The port number is 31337 and the Service is called ...
0
votes
1answer
141 views

Advice to detect suspicious activities on network

A private network (about 150 PCs) is connected to the internet through an edge router. According to the net admin, his network is scanned from the outside, at the edge router. I don’t have any more ...
2
votes
4answers
623 views

Router Receiving Unknown Packets from the Same IP and Port Even After Address Rotations - How?

One of our client's routers is receiving packets from the same source IP address and port repeatedly, even when the router is rebooted and obtains a fresh dynamically assigned IP address, and while no ...
0
votes
2answers
371 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
1
vote
0answers
28 views

Nmap showing different open ports every few seconds [duplicate]

I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show. I'm running ...
3
votes
1answer
927 views

NMAP results inconsistent

I'm doing a NMAP scan that runs continuously. For some reason the results are not consistent. Sometimes it detects all the connected devices of the local network and sometimes only some of them. ...
-1
votes
1answer
444 views

TCP Scans vs SYN Scans in port scanning

What is the difference between TCP Scans and SYN Scans?
2
votes
2answers
391 views

nmap - Difference between “Filtered” and “Admin-Prohibited”

I am a rather new user to nmap. By using some Google-Fu, I am still not able to ascertain what is the criteria used in order to distinguish "filtered" ports from "admin-prohibited" as they both seem ...
1
vote
2answers
484 views

Is there a way to see if an nMap scan in the background is progressing?

I have launched an nMap scan from an Ubuntu machine with the following parameters: nmap -Pn -T3 -sS -sV -iL /home/tsouser/Desktop/Scope.txt --reason --top-ports 100 --max_rtt_timeout 200ms --...
44
votes
3answers
9k views

Does a fake SSH server have any purpose security-wise?

I stumbled upon this sshesame software which appears to imitate an SSH server accepting any username/password, only instead of executing the subsequent shell commands it logs them in a file. What I ...
0
votes
0answers
236 views

Why nmap password scanner completes in 10 seconds and doesn't give any result?

I'm completely new to nmap and I'm trying to brute force passwords on a target. A command that I'm trying is: nmap -p 80 --unprivileged --script http-form-brute <target> But instead of "...
0
votes
1answer
270 views

XMAS Scan vs Inverse TCP

Whats the difference between a XMAS Tree scan and an Inverse TCP scan using the FIN, URG, and PSH flags? Are they the same thing? XMAS Tree scans are designed to manipulate the PSH, URG and FIN flags ...
2
votes
2answers
210 views

Should ports be visible to nmap?

I'm currently working on the firewall when I discovered that the firewall exposes a lot of ports outside of the internal network. I discovered this when setting up a new FTP server using a basic nmap ...
3
votes
1answer
140 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
1
vote
1answer
203 views

Can you scan unmanaged switches with vulnerability scanners?

The target switches do not have IP addresses and most scanners require IPs as targets. Can you scan unmanaged switches with vulnerability scanners? What scanners can target layer 2?
1
vote
0answers
120 views

Router detects my Nessus scan and kicks me off the network [closed]

I'm trying nessus on a public router. When I run a scan on the router at 10.0.0.1, the router somewhat detects it and proceeds to kick me off. If I put targets : 10.0.0.2-10.0.0.255 (scann all ...
1
vote
1answer
379 views

NMAP reporting all ports open

I'm trying to scan my targets for open ports. However, NMAP reports all of them as 'open'. I know there's a firewall in between. I tried the SYN scan, and when I check the traffic in WireShark I see ...
1
vote
3answers
334 views

Nmap scanning single port too fast? Shows as filtered?

I ran into an issue when trying to scan a single port on a single machine. I ran a range scan to find machines with port 25 open. Then I just arbitrarily chose one to work on. I scan that machine with ...
0
votes
1answer
54 views

What is an excessive amount of SYN requests for port scanning?

I have a slow internet connection - about 12Mb/s. In 10 minutes I have detected a distributed port scan on the router from different IPs. I have counted these SYN packets at in 600 seconds (10 minutes ...
1
vote
0answers
333 views

Connected devices to router are hidden

I was scanning devices connected to my WiFi with netdiscover(Kali linux).I was unable to find any device. I only get Router's IP and MAC address. It does not show any device although i have connected ...
1
vote
2answers
232 views

How to find and ban some devices from my wifi using the command line? [closed]

I use Arch Linux. I just installed some packages such as nmap, netdiscover and others. It is a ubiquiti internet network, for the sharing of connection to several routers. There are about 7 routers ...
1
vote
2answers
140 views

Am I being Hacked? So many defferent ip's in router firewall logs [duplicate]

My router dsl light was not stable; It keept disconnecting and connecting..So I logged into Router Homepage to check whats wrong and found there were so many different ip's in Router firewall logs I ...
-4
votes
2answers
148 views

Get IP address of camera

Is it possible to get the global IP address of a nearby camera? For example, an IP camera that is connect to a network, but you are not on that network, and cant get access for whatever reason) but ...
1
vote
1answer
335 views

How to detect a scan on a local machine?

Is there any way to detect a scan on the local machine ( the pc that I'm using with a linux os -ubuntu-) from the network that I'm connected to? I know that for the webservers we could check the ...
9
votes
3answers
589 views

What are some instant red flags when scanning an network with nmap

When doing an Nmap scan from an external network, what open ports should be an instant red flag? For example, if I was in the open internet and scanned www.somewebsite.com, besides port 22, what other ...
3
votes
2answers
284 views

Nmap and it default scripts when I already know some of the information

I am a network guy and not a “hacker” or whatever the official term is these days. I’ve been learning how to use nmap as I think it’s a great tool for just keeping the network secure. The thing is ...
1
vote
0answers
40 views

Is it possible to circumvent (ignore) routing table without root permissions?

The local host is configured to send all non-local traffic to a restrictive firewall VM configured in the routing table (route). Preliminary scanning shows that other routers are available on the ...
1
vote
2answers
170 views

How to scan allowed outbound (destination) ports on the local host?

Without access to firewall rules, I want to scan allowed outbound (destination) ports on the local machine. I would take too long to start a netcat listener for each of the destination ports on a ...
0
votes
2answers
712 views

Multiple Open ports on a server, is that safe? [closed]

Using nmap I try to scan a server as a result I get multiple open ports. For example when I try to scan domain.com as a result: 7/tcp open echo 9/tcp open discard 13/tcp open daytime 21/tcp filtered ...
2
votes
1answer
511 views

How to “Scan for hosts” only using ettercap (“text”) terminal interface?

I've been looking for a command to "Scan for hosts" in terminal ("text") ettercap. Do anyone knows how to scan the local subnet from the ettercap terminal? The graphical ("gtk") ettercap has the ...
1
vote
2answers
2k views

Xmas Scan Versus FIN Scan

While studying Nmap, I came across different port scans. Out of these XMAS and FIN scan caught my interest. Though XMAS scan sends FIN, URG and RST flags, the response is the same as that of a FIN ...
-1
votes
1answer
238 views

What are some IDS/IPS that are able to detect stealth scans done in nmap today? [closed]

I was informed that these scans are no longer "stealth"
2
votes
2answers
94 views

Identification of TLS POODLE Vulnerability

How can I identify whether the remote server is vulnerable to TLS POODLE vulnerability? Although, there are online scanners such as Qualys SSL Labs. As per my understanding, these online scanners do ...
3
votes
1answer
2k views

How to control the ciphersuites in nmap “ssl-enum-ciphers”

There is a script for enumerating the TLS versions and ciphersuites ofered by a server provided by nmap. See this link. Is there a way that allow me to specify the verisions and ciphersuites I want ...
2
votes
1answer
85 views

Named connections all over the world

I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files. I've come ...
0
votes
1answer
720 views

Detect and Scan Open Ports

I am trying to understand two questions - I run Qualys/Nessus scans on periodic basis in our Azure/AWS environment and always run into issues while detecting for Open ports, A basic nmap scan would ...
1
vote
1answer
433 views

Black Box penetration testing in private network

I came across a scenario where an organization is using micro-service architecture. They are using Amazon AWS as a web service and Kubernetes to maintain micro-services. All the EC2 instances are in ...