Questions tagged [network-scanners]

Programs that map out a network to figure out which computers and services are available to be exploited.

Filter by
Sorted by
Tagged with
0 votes
0 answers
79 views

NMAP same destination ip, different scanner interface, different result

I am trying to check the port status of a external IP using NMAP, I am getting different result on different interface to same destination (destination is a public IP). When NMAP tried from the ...
Shaim Khanusiya's user avatar
1 vote
1 answer
147 views

nmap: no exact OS matches when adding the exact signature to nmap-os-db

I'm currently trying to learn Nmap -O (OS guess feature). I'm launching the following command: nmap -O 172.17.0.3 This command is generating the following fingerprint as output: No exact OS ...
kefete's user avatar
  • 11
1 vote
1 answer
186 views

Does my ISP sees that I am using someone else's PPPoE username/password?

I want to ask that does my ISP will be able to see that I am using username/password of someone else on my dialup PPPoE.
Hamza's user avatar
  • 13
0 votes
2 answers
118 views

Do email security scans that follow links replace digest params in URLs with invalid values?

Going through our application logs recently I noticed a number of instances of page requests where an invalid SHA512 digest param in a URL resulted in a 403. A couple aspects of these requests make me ...
Kylos's user avatar
  • 335
0 votes
1 answer
238 views

Is there a way to identify whether "filtered" state in nmap output caused by a network or host-based firewall?

Is there a way to identify whether "filtered" state for a specific port in nmap output is caused by a network firewall or host-based firewall?
Manjula's user avatar
  • 180
2 votes
1 answer
348 views

How do I find subnets on the network in order to scan them for hosts?

I'm new to Security and I'm doing INE's Penetration Testing Student Learning path. In the current lab, (Find the Secret Server) we have this setup: The exercise focuses on adding an entry to the ...
MiguelP's user avatar
  • 121
1 vote
1 answer
355 views

How to confirm what service is running on a port identified by nmap?

Probing with nmap returns BlackICE on a couple of ports however it seems to be a really old tool according to these manuals. Starting Nmap 7.80 ( https://nmap.org ) at 2022-10-16 20:27 EDT Nmap scan ...
Dan's user avatar
  • 141
1 vote
1 answer
207 views

How can I port scan my p2p device?

I have a device and I am trying to port scan it. I did the basic nmap -A -p0- 192.168.0.x but I am just getting 0/tcp filtered unknown so I don't think it is working. The device works on p2p so I am ...
AskedSuperior's user avatar
1 vote
0 answers
88 views

How to evaluate a responsive but unknown network protocol?

I am studying CREST CPSA where the syllabus is listed here. There is a part of the syllabus which states I should know the Evaluation of responsive but unknown network applications. I find this ...
questioner's user avatar
1 vote
1 answer
830 views

What are the drawbacks of a stealthy port scan?

I read that port scanning services like nmap will conduct a "TCP Connect Scan". They'll attempt to make a TCP connection to each of the ports within the range provided. But because each of ...
redpanda2236's user avatar
4 votes
1 answer
1k views

What is the need for firewall to be in "stealth mode"?

There is a firewall deployment case called "transparent mode", when the firewall does its job without routing and having IPv4 addresses, i.e. it is invisible. "Stealth mode" is ...
z0lupka's user avatar
  • 141
0 votes
0 answers
87 views

How to find out what payloads are being uploaded when I am running a scan of remote website?

I have been running an Acunetix vulnerability scan of a remote website (containing 50 subdomains). I am not doing anything else on this system. However, my system is connected to a remote VPS via VPN, ...
Shy's user avatar
  • 121
0 votes
0 answers
231 views

Router scanning ports on all connected devices

From time to time, my router starts to scan ports on all the connected devices. I have an internal RPi server which I restricted its access to the internet from the router. I checked the "/var/...
POD's user avatar
  • 101
1 vote
3 answers
433 views

Port scanning against assets that are behind a WAF

I am trying to automate my recon process. For port scanning, I resolve subdomains to IPs then loop over those IPs with masscan. But is it worth it to port scan an asset that is hidden behind a web ...
Sinatra's user avatar
  • 11
1 vote
1 answer
437 views

Getting reverse shell from firewalled target

Suppose this scenario: You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and ...
hyogy's user avatar
  • 13
1 vote
2 answers
112 views

Using Chrome on non-trusted macOS computer

So I'm using an untrusted computer but on a trusted network (my home). The operating-system + hardware are trusted but the Profiles, certificates & software installed in the system are not trusted....
Luca Matteis's user avatar
5 votes
2 answers
4k views

Why can I ping a server, but nmap normal scan cannot see the host?

I am able to ping a server on an vpn. However, when I use a normal nmap scan it does not pickup on the host. Doing a scan with host discovery turned off (nmap -Pn host scan) does show the host. If I ...
CorrieJanse's user avatar
0 votes
1 answer
1k views

How to check if my ports are exposed to the internet

[Crossposting from SO] I am trying to make a port scanner in Python and trying to list which all ports are accessible by anyone remotely. Using the socket.connect_ex package, I was able to check which ...
Eagle's user avatar
  • 115
1 vote
1 answer
665 views

How do I find the IP address of a specific device on the local network? [closed]

I would like to learn how to find the private IP address of anyone connected to a network. This specific network has a firewall. The only info I have on it is that it blocks ICMP requests (I'm pretty ...
Matthew Schell's user avatar
0 votes
1 answer
316 views

Can changing your IP address prevent an NMap attack?

If an nmap attacker started a port scan on my network, would changing my network IP address prevent/halt it?
LemonHeadAsks's user avatar
4 votes
1 answer
1k views

Why do I need root privileges to send a raw packet from a UNIX machine?

I was recently reading through the nmap port scanning documentation and it points out that to perform a SYN scan (-sS) you require root privileges because an unprivileged user cannot send raw packets. ...
0x003's user avatar
  • 98
2 votes
1 answer
367 views

Docker container exposed port vulnerabilities on Debian server?

I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
user13581602's user avatar
0 votes
1 answer
94 views

Is using a server as bridge secure enough to protect the end data?

It comes to my mind a security problem that I would have accessing some data. My current problem is the following: There is a server in AWS London where you can access some data, by law, that data ...
jpganz18's user avatar
  • 111
0 votes
1 answer
145 views

Estimate the number of host computers on the private network by port scanning

If we have a private network connected to the Internet with NAT, how can an attacker estimate the number of host computers in network using port scanning? For both possible modes, the attacker inside ...
Meysam's user avatar
  • 113
1 vote
0 answers
401 views

Unable to ping scan my machine (but I can ping)

I need to perform an nmap scan on all of the (responding) IPs in an array of VLANs. The command is nested in a PowerShell for loop and looks something like this: nmap.exe -Pn -T4 -A -oG [FILE].txt -oX ...
TheCube's user avatar
  • 11
1 vote
1 answer
493 views

How is a service running at a specific port discovered and how to hide it?

I have my Raspberry Pi accessible through SSH and I do not want it to reveal any information to port-scans such as below: How do port-scanners (I used Advanced Port scanner on Windows 10) get so much ...
Max's user avatar
  • 45
0 votes
1 answer
385 views

A single IP address hosts multiple domain at the same time. How do I scan a single domain using nmap or other tools?

Let's say an IP address hosts multiple domains, (example.com, example.net, example.org, etc.). How do I port scan a specific domain?
bang_jagoet's user avatar
1 vote
1 answer
599 views

Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts

Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one: FROM: [::...
Busy Shader's user avatar
1 vote
1 answer
202 views

Service changing port when scanned with nmap [closed]

While scanning a host with nmap I have discovered an unusual service. The service moves to another port everytime I perform an nmap-scan or try to curl it. I have not yet found any info about similar ...
sveggen's user avatar
  • 11
1 vote
0 answers
104 views

Secure Implementation of Network Discovery Tool in Corporate Network [closed]

I would like to implement a network discovery tool, which automatically detects all devices in a network including OS information. I would like to do a very secure implementation. The biggest threat ...
Lorem ipsum's user avatar
1 vote
0 answers
217 views

nmap -oG X.X.X.0-255 doesn't work and all my ports closed ( expected list of open ports ) [closed]

I'm running kali Linux on VirtualBox. I ran sudo ifconfig to get my IP and subnet mask (X.X.X.15 and 255.255.255.0 for eth0) I tried the command nmap -oG X.X.X.0-255 -vv but I got Read data files ...
Ahmed Hanafy El Drawy's user avatar
1 vote
1 answer
187 views

Blocking network scanning attempts at the switchport [closed]

Have noticed that I can scan the network though I have set an arp limit rate on the Cisco switch switchport and need some recommendations. The previous engineer set an arp rate limit of 200 and ...
user4565's user avatar
  • 151
-2 votes
1 answer
181 views

In hping3, What is "win=x"

In the verbose output of hping3, what is win=x. For example, len=46 ip=4.2.2.1 ttl=56 DF id=32841 sport=52 flags=RA seq=2 win=0 rtt=285.4 ms len=46 ip=4.2.2.1 ttl=56 DF id=32842 sport=52 flags=RA seq=...
talkinggoat's user avatar
-1 votes
2 answers
807 views

What are the advantages of port scanning?

It seems like all the google results to this question answer what port scanning is, but go into little detail about how a pentester or hacker could use the information about what ports a network has ...
weddegege's user avatar
0 votes
1 answer
139 views

What happens when attacker scan a IP that is used by multiple devices? [duplicate]

Assuming ISP gives only 1 external IP and you have few devices that use this IP. So you will have a router and few PC's with same external IP and different local IP. When all PC's are online and one ...
user237820's user avatar
2 votes
1 answer
289 views

How long does a secret URL need to be?

I'm currently creating a small service where users can upload images (just a free time project). The images are either private, public (unlisted) or public (listed). Now I'm wondering for public ...
Martin Thoma's user avatar
  • 3,916
0 votes
2 answers
2k views

Nmap scanning with and without proxychains has different behaviour

I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333 On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
rcarba's user avatar
  • 103
27 votes
4 answers
4k views

Web sites executing local port scans: Is this coming from a library? Can it be blocked?

I recently read a piece by an infosec analyst who observed ebay.com doing a local port scan. I could not believe my eyes, but it was quickly reproduced by me (see below for my observation). I surfed ...
Jonesome Reinstate Monica's user avatar
0 votes
0 answers
250 views

Very odd traffic - is it legit?

While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
Kevin Keane's user avatar
  • 1,097
0 votes
0 answers
438 views

Host not connected to my router shows up in a nmap scan

After scanning my local network with nmap, this host shows up listed as a nmap result but it is the only host that shows on nmap that is not listed as a client on my router list of connected devices. ...
Luis Vasconcellos's user avatar
1 vote
0 answers
2k views

Concerns about Fing scanner [closed]

For years I have been using the Fing iOS app to scan my home network to check for unknown devices. The iOS apps is nice and self contained, so I never worried much about its own security. I recently ...
Carlos N's user avatar
  • 111
0 votes
1 answer
156 views

Got requests to unpublished services. Am I being spied on?

Just today I'm migrating some of my webpages to a new server. After a couple hours the services was ready, I set up a hosts file with my domain example.com pointing to the server address, went to my ...
Jassiel Díaz's user avatar
0 votes
1 answer
331 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
finefoot's user avatar
  • 211
0 votes
1 answer
259 views

pycharm opening ports [closed]

By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on. Pycharm is a great tool for developer, but it seems fairly awful to me on the ...
DevShark's user avatar
  • 343
1 vote
0 answers
491 views

Is there an updated (non-Nmap) top 100 or top 1000 common ports list?

I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
519dsd's user avatar
  • 11
1 vote
1 answer
257 views

Local Scans initiated from a VLAN Broadcast IP address

Just reviewing some logs and I am seeing local scans to several local IP addresses on port 137 within my network. The source IP however is the broadcast IP of the VLAN (.255). I have checked the ...
TheGreyShadow's user avatar
2 votes
1 answer
3k views

Unkown ip adress in my lan [duplicate]

While scanning my LAN with Angry IP Scanner, I found an ip @ that I didn't recognise 192.168.1.59: IP Ping Hostname MAC Address MAC Vendor ...
Ron Swanson's user avatar
1 vote
1 answer
803 views

Scapy: Sending forged Probe Requests and capturing them in a different device

Objective: Sending a forged Probe Request frame from one machine and capturing it on a second machine. I have two codes running: sender.py interface = sys.argv[1] dot11 = Dot11(addr1='ff:ff:ff:ff:...
Rafael's user avatar
  • 55
1 vote
1 answer
831 views

Is there any method or tool other than nmap for the detection of an OS?

I wanted to know if there was any other way to detect the OS of a network (other than nmap) since nmap doesn't detect most versions of Windows 10 at all and identifies them as a different OS ...
DragonlordDrake's user avatar
3 votes
1 answer
1k views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
rzv's user avatar
  • 31

1
2 3 4 5
8