Questions tagged [network-scanners]

Programs that map out a network to figure out which computers and services are available to be exploited.

Filter by
Sorted by
Tagged with
0
votes
1answer
45 views

What happens when attacker scan a IP that is used by multiple devices? [duplicate]

Assuming ISP gives only 1 external IP and you have few devices that use this IP. So you will have a router and few PC's with same external IP and different local IP. When all PC's are online and one ...
2
votes
1answer
68 views

How long does a secret URL need to be?

I'm currently creating a small service where users can upload images (just a free time project). The images are either private, public (unlisted) or public (listed). Now I'm wondering for public ...
0
votes
2answers
63 views

Nmap scanning with and without proxychains has different behaviour

I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333 On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
26
votes
4answers
3k views

Web sites executing local port scans: Is this coming from a library? Can it be blocked?

I recently read a piece by an infosec analyst who observed ebay.com doing a local port scan. I could not believe my eyes, but it was quickly reproduced by me (see below for my observation). I surfed ...
0
votes
0answers
68 views

Very odd traffic - is it legit?

While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
0
votes
0answers
101 views

Host not connected to my router shows up in a nmap scan

After scanning my local network with nmap, this host shows up listed as a nmap result but it is the only host that shows on nmap that is not listed as a client on my router list of connected devices. ...
0
votes
0answers
64 views

Secure MPLS configuration: Does TCP port 646 (LDP) need to be generally exposed?

I am looking for expertise on MPLS configurations and security. A recent scan of my organization's public IPv4 perimeter networks using Rapid7 InsightVM has discovered a system which appears to be ...
1
vote
0answers
55 views

Concerns about Fing scanner [closed]

For years I have been using the Fing iOS app to scan my home network to check for unknown devices. The iOS apps is nice and self contained, so I never worried much about its own security. I recently ...
0
votes
1answer
107 views

Got requests to unpublished services. Am I being spied on?

Just today I'm migrating some of my webpages to a new server. After a couple hours the services was ready, I set up a hosts file with my domain example.com pointing to the server address, went to my ...
0
votes
1answer
93 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
0
votes
0answers
379 views

Packet Capturing with 2 or more SSL Certificate

To capturing the packet from android application, I configurated proxy likes below. Physical :::: [Mobile Device] -------------------- [PC] ------------------- [Server] Installed :::: [Packet ...
0
votes
1answer
69 views

pycharm opening ports [closed]

By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on. Pycharm is a great tool for developer, but it seems fairly awful to me on the ...
1
vote
0answers
103 views

Is there an updated (non-Nmap) top 100 or top 1000 common ports list?

I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
1
vote
1answer
65 views

Local Scans initiated from a VLAN Broadcast IP address

Just reviewing some logs and I am seeing local scans to several local IP addresses on port 137 within my network. The source IP however is the broadcast IP of the VLAN (.255). I have checked the ...
2
votes
1answer
256 views

Unkown ip adress in my lan [duplicate]

While scanning my LAN with Angry IP Scanner, I found an ip @ that I didn't recognise 192.168.1.59: IP Ping Hostname MAC Address MAC Vendor ...
1
vote
1answer
83 views

Scapy: Sending forged Probe Requests and capturing them in a different device

Objective: Sending a forged Probe Request frame from one machine and capturing it on a second machine. I have two codes running: sender.py interface = sys.argv[1] dot11 = Dot11(addr1='ff:ff:ff:ff:...
1
vote
1answer
100 views

Is there any method or tool other than nmap for the detection of an OS?

I wanted to know if there was any other way to detect the OS of a network (other than nmap) since nmap doesn't detect most versions of Windows 10 at all and identifies them as a different OS ...
3
votes
1answer
283 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
-4
votes
2answers
231 views

How to Defend Against Port Scan Attacks

I was told that Hackers scan for open ports in random IPs and if they are open they hack the computer. What open ports can be hacked? How do I close the ports?
2
votes
0answers
148 views

Where to run long automated scans? [closed]

I'm trying to run some automated scans without stopping for long periods of time (each scan can take anywhere from 8 hours to 3 days). I currently don't have a PC I can leave running for many days ...
1
vote
0answers
42 views

Router reboots when doing port scan [closed]

This question is very much related to Router reboots when using Nmap, the difference is that I'm actually interested in a practical solution to this problem. I have a piece of C code that is doing ...
-4
votes
1answer
364 views

Pentesting: Active vs Passive Scan [closed]

I couldn't find answers to this question on this forum so I'm just gonna ask: What are Active Scans and Passive Scans? What are their differences? Please include in your answer(s): differences in ...
-2
votes
2answers
210 views

Did I just find a bug in CloudFlare or is this a feature?

While doing penetration testing for a client I stumbled upon a security incident. CloudFlare promises to hide the origin IP address when using its DNS. I went to dnsdumpster.com, inputted my client's ...
0
votes
1answer
135 views

Nmap scan slow on some IP ranges [closed]

I'm a security newbie trying to scan a VPN in the range 10.0.0.0 - 10.0.15.254 using nmap on Kali Linux. The routing table: route -n Kernel IP routing table Destination Gateway Genmask ...
0
votes
0answers
95 views

Port scanning - Idle scan 2.0?

I have some server applications and from time to time I'm being victim of some attacks which might be of interest and I'm going to describe in the following. The most recent attack originated from ...
0
votes
1answer
189 views

Firebase ports scanning using nmap

Purely for research purposes used nmap to check security of my application deployed to Firebase. However, there some questions which I can't understand: Why Firebase has open so many ports? Something ...
0
votes
1answer
281 views

Malicious IP addresses [closed]

I am looking for updated lists of IP addresses that belong to malware's C&C, botnets, malicious scanners, or other sort of malicious activities. Is there any public database of malicious IP ...
0
votes
1answer
117 views

Hardening against Nmap and other network scanners

It is possible to make Server respond with irrelevant data if it is scanned with Nmap? If yes, are there any examples of such SW?
0
votes
2answers
161 views

Can wireshark capture the exact payload and end point of API used by my Mobile APP?

I was just wondering if someone having total control over his/her network, is running my mobile app. Also wireshark is capturing all requests made using the network. My app is calling API endpoint ...
0
votes
1answer
147 views

Incorrect results via Nexpose, but displaying correct one with Nmap

We are scanning our network via Nexpose. Recently an asset was found vulnerable to Wannacry CVE 2017-0146 SMB Remote code execution vulnerability. However when i have tested it same through Nmap it ...
1
vote
0answers
987 views

How secure is my apartment's building wide wifi network using Spectrum Community Solutions?

Recently my apartment moved from having individual modems (with our own router/wifi network) to this Spectrum Community Solutions building wide network. Everyone can connect to the network anywhere, ...
-1
votes
1answer
69 views

Finding location of malicious internal IP in Wide Area Network [closed]

Malicious Traffic detected from an internal IP in Wide Area Network (Network of multiple cities in a country). How to find the city of that IP address in Wide Area Network? There is no IP subnet by ...
-1
votes
1answer
315 views

How to find out which application runs behind port 31337?

I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels. The port number is 31337 and the Service is called ...
0
votes
1answer
218 views

Advice to detect suspicious activities on network

A private network (about 150 PCs) is connected to the internet through an edge router. According to the net admin, his network is scanned from the outside, at the edge router. I don’t have any more ...
2
votes
4answers
828 views

Router Receiving Unknown Packets from the Same IP and Port Even After Address Rotations - How?

One of our client's routers is receiving packets from the same source IP address and port repeatedly, even when the router is rebooted and obtains a fresh dynamically assigned IP address, and while no ...
0
votes
2answers
899 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
1
vote
0answers
29 views

Nmap showing different open ports every few seconds [duplicate]

I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show. I'm running ...
3
votes
1answer
3k views

NMAP results inconsistent

I'm doing a NMAP scan that runs continuously. For some reason the results are not consistent. Sometimes it detects all the connected devices of the local network and sometimes only some of them. ...
-1
votes
1answer
1k views

TCP Scans vs SYN Scans in port scanning

What is the difference between TCP Scans and SYN Scans?
2
votes
2answers
760 views

nmap - Difference between “Filtered” and “Admin-Prohibited”

I am a rather new user to nmap. By using some Google-Fu, I am still not able to ascertain what is the criteria used in order to distinguish "filtered" ports from "admin-prohibited" as they both seem ...
1
vote
2answers
1k views

Is there a way to see if an nMap scan in the background is progressing?

I have launched an nMap scan from an Ubuntu machine with the following parameters: nmap -Pn -T3 -sS -sV -iL /home/tsouser/Desktop/Scope.txt --reason --top-ports 100 --max_rtt_timeout 200ms --...
44
votes
3answers
9k views

Does a fake SSH server have any purpose security-wise?

I stumbled upon this sshesame software which appears to imitate an SSH server accepting any username/password, only instead of executing the subsequent shell commands it logs them in a file. What I ...
0
votes
0answers
510 views

Why nmap password scanner completes in 10 seconds and doesn't give any result?

I'm completely new to nmap and I'm trying to brute force passwords on a target. A command that I'm trying is: nmap -p 80 --unprivileged --script http-form-brute <target> But instead of "...
0
votes
1answer
420 views

XMAS Scan vs Inverse TCP

Whats the difference between a XMAS Tree scan and an Inverse TCP scan using the FIN, URG, and PSH flags? Are they the same thing? XMAS Tree scans are designed to manipulate the PSH, URG and FIN flags ...
3
votes
2answers
389 views

Should ports be visible to nmap?

I'm currently working on the firewall when I discovered that the firewall exposes a lot of ports outside of the internal network. I discovered this when setting up a new FTP server using a basic nmap ...
3
votes
1answer
225 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
1
vote
1answer
313 views

Can you scan unmanaged switches with vulnerability scanners?

The target switches do not have IP addresses and most scanners require IPs as targets. Can you scan unmanaged switches with vulnerability scanners? What scanners can target layer 2?
1
vote
0answers
131 views

Router detects my Nessus scan and kicks me off the network [closed]

I'm trying nessus on a public router. When I run a scan on the router at 10.0.0.1, the router somewhat detects it and proceeds to kick me off. If I put targets : 10.0.0.2-10.0.0.255 (scann all ...
1
vote
1answer
582 views

NMAP reporting all ports open

I'm trying to scan my targets for open ports. However, NMAP reports all of them as 'open'. I know there's a firewall in between. I tried the SYN scan, and when I check the traffic in WireShark I see ...
1
vote
3answers
478 views

Nmap scanning single port too fast? Shows as filtered?

I ran into an issue when trying to scan a single port on a single machine. I ran a range scan to find machines with port 25 open. Then I just arbitrarily chose one to work on. I scan that machine with ...

1
2 3 4 5
7