Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [network-scanners]

Programs that map out a network to figure out which computers and services are available to be exploited.

-1
votes
0answers
51 views

I just found out that my port 53 is opened [on hold]

My phone has been taken over. Pretty much nothing works. I can see a lot of odd traffic coming and going. Try to reboot and reset and it won't let me. It always returns the bootloader they have placed....
0
votes
2answers
51 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
0
votes
0answers
37 views

WiFi Takeover? Can someone know what im doing online at any given time? [closed]

If someone has access to your wifi network, whether through being hacked or otherwise, can they see what you're doing online at any given time? I know this person is actively trying ruin my life and ...
1
vote
0answers
25 views

Nmap showing different open ports every few seconds [duplicate]

I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show. I'm running ...
3
votes
1answer
90 views

NMAP results inconsistent

I'm doing a NMAP scan that runs continuously. For some reason the results are not consistent. Sometimes it detects all the connected devices of the local network and sometimes only some of them. ...
-1
votes
1answer
77 views

TCP Scans vs SYN Scans in port scanning

What is the difference between TCP Scans and SYN Scans?
2
votes
2answers
90 views

nmap - Difference between “Filtered” and “Admin-Prohibited”

I am a rather new user to nmap. By using some Google-Fu, I am still not able to ascertain what is the criteria used in order to distinguish "filtered" ports from "admin-prohibited" as they both seem ...
1
vote
2answers
119 views

Is there a way to see if an nMap scan in the background is progressing?

I have launched an nMap scan from an Ubuntu machine with the following parameters: nmap -Pn -T3 -sS -sV -iL /home/tsouser/Desktop/Scope.txt --reason --top-ports 100 --max_rtt_timeout 200ms --...
44
votes
3answers
9k views

Does a fake SSH server have any purpose security-wise?

I stumbled upon this sshesame software which appears to imitate an SSH server accepting any username/password, only instead of executing the subsequent shell commands it logs them in a file. What I ...
0
votes
0answers
78 views

Why nmap password scanner completes in 10 seconds and doesn't give any result?

I'm completely new to nmap and I'm trying to brute force passwords on a target. A command that I'm trying is: nmap -p 80 --unprivileged --script http-form-brute <target> But instead of "...
0
votes
1answer
40 views

XMAS Scan vs Inverse TCP

Whats the difference between a XMAS Tree scan and an Inverse TCP scan using the FIN, URG, and PSH flags? Are they the same thing? XMAS Tree scans are designed to manipulate the PSH, URG and FIN flags ...
1
vote
2answers
95 views

Should ports be visible to nmap?

I'm currently working on the firewall when I discovered that the firewall exposes a lot of ports outside of the internal network. I discovered this when setting up a new FTP server using a basic nmap ...
3
votes
1answer
86 views

How do I know that the request and response is using encryption protocols in burp suite?

I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
1
vote
1answer
64 views

Can you scan unmanaged switches with vulnerability scanners?

The target switches do not have IP addresses and most scanners require IPs as targets. Can you scan unmanaged switches with vulnerability scanners? What scanners can target layer 2?
1
vote
0answers
90 views

Router detects my Nessus scan and kicks me off the network [closed]

I'm trying nessus on a public router. When I run a scan on the router at 10.0.0.1, the router somewhat detects it and proceeds to kick me off. If I put targets : 10.0.0.2-10.0.0.255 (scann all ...
1
vote
1answer
196 views

NMAP reporting all ports open

I'm trying to scan my targets for open ports. However, NMAP reports all of them as 'open'. I know there's a firewall in between. I tried the SYN scan, and when I check the traffic in WireShark I see ...
0
votes
3answers
130 views

Nmap scanning single port too fast? Shows as filtered?

I ran into an issue when trying to scan a single port on a single machine. I ran a range scan to find machines with port 25 open. Then I just arbitrarily chose one to work on. I scan that machine with ...
0
votes
1answer
51 views

What is an excessive amount of SYN requests for port scanning?

I have a slow internet connection - about 12Mb/s. In 10 minutes I have detected a distributed port scan on the router from different IPs. I have counted these SYN packets at in 600 seconds (10 minutes ...
1
vote
0answers
105 views

Connected devices to router are hidden

I was scanning devices connected to my WiFi with netdiscover(Kali linux).I was unable to find any device. I only get Router's IP and MAC address. It does not show any device although i have connected ...
1
vote
2answers
164 views

How to find and ban some devices from my wifi using the command line? [closed]

I use Arch Linux. I just installed some packages such as nmap, netdiscover and others. It is a ubiquiti internet network, for the sharing of connection to several routers. There are about 7 routers ...
1
vote
2answers
128 views

Am I being Hacked? So many defferent ip's in router firewall logs [duplicate]

My router dsl light was not stable; It keept disconnecting and connecting..So I logged into Router Homepage to check whats wrong and found there were so many different ip's in Router firewall logs I ...
-4
votes
2answers
131 views

Get IP address of camera

Is it possible to get the global IP address of a nearby camera? For example, an IP camera that is connect to a network, but you are not on that network, and cant get access for whatever reason) but ...
1
vote
1answer
110 views

How to detect a scan on a local machine?

Is there any way to detect a scan on the local machine ( the pc that I'm using with a linux os -ubuntu-) from the network that I'm connected to? I know that for the webservers we could check the ...
-1
votes
0answers
105 views

All smartphone ports filtered - how to scan smartphones on local Wifi?

I am using Nmap and scanning my smartphone (LG G5 - Android) on my local network and practicing trying to gain remote access into it. However, whenever I scan my cellphone, either all ports are closed ...
9
votes
3answers
524 views

What are some instant red flags when scanning an network with nmap

When doing an Nmap scan from an external network, what open ports should be an instant red flag? For example, if I was in the open internet and scanned www.somewebsite.com, besides port 22, what other ...
3
votes
2answers
128 views

Nmap and it default scripts when I already know some of the information

I am a network guy and not a “hacker” or whatever the official term is these days. I’ve been learning how to use nmap as I think it’s a great tool for just keeping the network secure. The thing is ...
1
vote
0answers
34 views

Is it possible to circumvent (ignore) routing table without root permissions?

The local host is configured to send all non-local traffic to a restrictive firewall VM configured in the routing table (route). Preliminary scanning shows that other routers are available on the ...
1
vote
2answers
100 views

How to scan allowed outbound (destination) ports on the local host?

Without access to firewall rules, I want to scan allowed outbound (destination) ports on the local machine. I would take too long to start a netcat listener for each of the destination ports on a ...
0
votes
2answers
412 views

Multiple Open ports on a server, is that safe? [closed]

Using nmap I try to scan a server as a result I get multiple open ports. For example when I try to scan domain.com as a result: 7/tcp open echo 9/tcp open discard 13/tcp open daytime 21/tcp filtered ...
1
vote
0answers
267 views

How to “Scan for hosts” only using ettercap (“text”) terminal interface?

I've been looking for a command to "Scan for hosts" in terminal ("text") ettercap. Do anyone knows how to scan the local subnet from the ettercap terminal? The graphical ("gtk") ettercap has the ...
-1
votes
0answers
451 views

hydra http-post-form question about <form parameters> and <failed login message>

I have 2 question after reading this guide on how to evaluate router admin password: https://buffercode.in/hack-crack-web-form-passwords-using-hydra-burpsuite-kali-linux/ This is the command format: ...
1
vote
2answers
1k views

Xmas Scan Versus FIN Scan

While studying Nmap, I came across different port scans. Out of these XMAS and FIN scan caught my interest. Though XMAS scan sends FIN, URG and RST flags, the response is the same as that of a FIN ...
-1
votes
1answer
152 views

What are some IDS/IPS that are able to detect stealth scans done in nmap today? [closed]

I was informed that these scans are no longer "stealth"
2
votes
2answers
68 views

Identification of TLS POODLE Vulnerability

How can I identify whether the remote server is vulnerable to TLS POODLE vulnerability? Although, there are online scanners such as Qualys SSL Labs. As per my understanding, these online scanners do ...
2
votes
1answer
844 views

How to control the ciphersuites in nmap “ssl-enum-ciphers”

There is a script for enumerating the TLS versions and ciphersuites ofered by a server provided by nmap. See this link. Is there a way that allow me to specify the verisions and ciphersuites I want ...
2
votes
1answer
83 views

Named connections all over the world

I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files. I've come ...
0
votes
1answer
493 views

Detect and Scan Open Ports

I am trying to understand two questions - I run Qualys/Nessus scans on periodic basis in our Azure/AWS environment and always run into issues while detecting for Open ports, A basic nmap scan would ...
1
vote
1answer
330 views

Black Box penetration testing in private network

I came across a scenario where an organization is using micro-service architecture. They are using Amazon AWS as a web service and Kubernetes to maintain micro-services. All the EC2 instances are in ...
3
votes
1answer
3k views

NMAP - Closed vs Filtered

A lot of people seem to ask this question, as there are a bunch of posts about it; however I feel like none truly answer the question (that I have found). I want to understand why NMAP decides to ...
0
votes
3answers
2k views

How to get shodan to report IP addresses with a specific open port?

I've done the leg work and I've struggled to identify how to search with the Shodan CLI, or the web search, just for a specific port and output all the IP addresses that expose this port. For ...
2
votes
1answer
242 views

Nessus Target Availability

I need to write a script (I am not asking for script !) in order to verify if target Servers are available (Up or Down) for Nessus scan or not. The problem is that, sometimes even if ping does not ...
1
vote
0answers
86 views

scapy Deauthentication address understanding

I have the problem to understand from_DS, to_DS with Deauthentication packet, deauthentication packets are type=Managment, FCfield managment and control frames always FROM_DS = 0 , TO_DS=0, ...
0
votes
1answer
283 views

Replace Nmap with Nessus

I have to replace NMAP with Nessus. I got answer for few settings, but there are few settings in NMAP for which I am not able to get answer. If you could answer me, it would be helpful. For example, ...
7
votes
3answers
4k views

Nessus Port scan Vs NMAP Port scan

My objective is to find network vulnerabilities. I have used Nessus and NMAP both for vulnerability scan. I have to verify if I can use only "Nessus" rather than using "NMAP". According to my ...
25
votes
2answers
5k views

How wise is it to use a tool for portspoofing at your server to confuse attackers?

I came across this tool recently https://github.com/drk1wi/portspoof How efficient will it be to use it to confuse hackers doing port scanning? If it's actually going to be pretty efficient, why ...
1
vote
3answers
464 views

Number of bytes in a TLS handshake

How can I identify precisely the exact number of bytes the ClientHello and ServerHello in a TLS traffic needs? this is for traffic analysis purpose to capture the TLS bytes of interest (client hello ...
0
votes
1answer
104 views

Re-run nmap OS fingerprint match with existing subject fingerprint

I have a collection of nmap subject fingerprints (described here), but have updated my local (private) reference fingerprint database since they were collected. Is there any existing way to re-match ...
1
vote
1answer
178 views

How vulnerability scanners identify version of services on targets

I would like to know that how vulnerability scanners identify the version of services running on the target after identifying the service by the port number.
2
votes
1answer
341 views

How to perform a port scan against a target with a software-based firewall?

I use NMAP to perform port scanning, e.g., TCP SYN scan: nmap -sS 192.168.0.12. I've two virtual machines running Windows XP and Windows 7, respetively. These have several services running, e.g., ...
1
vote
2answers
2k views

Most efficient way to scan for webservers

Lets say I want to scan a large amount of ip addresses for webservers running on port 80 (aware that there are other ports for webservers, ignoring for example). What would be the most efficient way ...