Questions tagged [network-scanners]

Programs that map out a network to figure out which computers and services are available to be exploited.

Filter by
Sorted by
Tagged with
2
votes
2answers
171 views

Why can I ping a server, but nmap normal scan cannot see the host?

I am able to ping a server on an vpn. However, when I use a normal nmap scan it does not pickup on the host. Doing a scan with host discovery turned off (nmap -Pn host scan) does show the host. If I ...
0
votes
1answer
84 views

How to check if my ports are exposed to the internet

[Crossposting from SO] I am trying to make a port scanner in Python and trying to list which all ports are accessible by anyone remotely. Using the socket.connect_ex package, I was able to check which ...
0
votes
0answers
35 views

nmap -sn different results than - sL (-sL shows missing host from -sn)

Executing nmap -sn 192.168.2.1/24 gives all hosts but 1 (192.168.2.116 just won’t show). ping 192.168.2.116 works flawlessly. Nmap -sL 192.168.2.1/24 shows all hosts also the missing 192.168.2.116 ...
1
vote
1answer
227 views

How do I find the IP address of a specific device on the local network? [closed]

I would like to learn how to find the private IP address of anyone connected to a network. This specific network has a firewall. The only info I have on it is that it blocks ICMP requests (I'm pretty ...
0
votes
1answer
97 views

Can changing your IP address prevent an NMap attack?

If an nmap attacker started a port scan on my network, would changing my network IP address prevent/halt it?
0
votes
0answers
31 views

amass issue - Excluding multiple data sources not working

I am trying to run a scan and I wanted to exclude two sources Alterations and Reverse DNS. But regardless of how I try, amass continues to list Reverse DNS. As per the documentation we should separate ...
4
votes
1answer
206 views

Why do I need root privileges to send a raw packet from a UNIX machine?

I was recently reading through the nmap port scanning documentation and it points out that to perform a SYN scan (-sS) you require root privileges because an unprivileged user cannot send raw packets. ...
2
votes
1answer
85 views

Docker container exposed port vulnerabilities on Debian server?

I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
0
votes
1answer
50 views

Is using a server as bridge secure enough to protect the end data?

It comes to my mind a security problem that I would have accessing some data. My current problem is the following: There is a server in AWS London where you can access some data, by law, that data ...
0
votes
1answer
59 views

Estimate the number of host computers on the private network by port scanning

If we have a private network connected to the Internet with NAT, how can an attacker estimate the number of host computers in network using port scanning? For both possible modes, the attacker inside ...
1
vote
0answers
74 views

Unable to ping scan my machine (but I can ping)

I need to perform an nmap scan on all of the (responding) IPs in an array of VLANs. The command is nested in a PowerShell for loop and looks something like this: nmap.exe -Pn -T4 -A -oG [FILE].txt -oX ...
1
vote
1answer
111 views

How is a service running at a specific port discovered and how to hide it?

I have my Raspberry Pi accessible through SSH and I do not want it to reveal any information to port-scans such as below: How do port-scanners (I used Advanced Port scanner on Windows 10) get so much ...
0
votes
1answer
59 views

a single ip adress host multiple domain at the same time, how do i scan it using nmap or other tools?

lets say an ip adress 111.111.111.111 host multiple domain, (example.com , exampleid.com , admin.example.com, etc.) and i wanted to scan it port, how do i scan a spesific domain (headers key: Host ...
0
votes
1answer
145 views

Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts

Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one: FROM: [::...
1
vote
1answer
91 views

Service changing port when scanned with nmap [closed]

While scanning a host with nmap I have discovered an unusual service. The service moves to another port everytime I perform an nmap-scan or try to curl it. I have not yet found any info about similar ...
1
vote
0answers
47 views

Secure Implementation of Network Discovery Tool in Corporate Network [closed]

I would like to implement a network discovery tool, which automatically detects all devices in a network including OS information. I would like to do a very secure implementation. The biggest threat ...
1
vote
0answers
43 views

nmap -oG X.X.X.0-255 doesn't work and all my ports closed ( expected list of open ports ) [closed]

I'm running kali Linux on VirtualBox. I ran sudo ifconfig to get my IP and subnet mask (X.X.X.15 and 255.255.255.0 for eth0) I tried the command nmap -oG X.X.X.0-255 -vv but I got Read data files ...
1
vote
1answer
65 views

Blocking network scanning attempts at the switchport [closed]

Have noticed that I can scan the network though I have set an arp limit rate on the Cisco switch switchport and need some recommendations. The previous engineer set an arp rate limit of 200 and ...
-2
votes
1answer
46 views

In hping3, What is “win=x”

In the verbose output of hping3, what is win=x. For example, len=46 ip=4.2.2.1 ttl=56 DF id=32841 sport=52 flags=RA seq=2 win=0 rtt=285.4 ms len=46 ip=4.2.2.1 ttl=56 DF id=32842 sport=52 flags=RA seq=...
-1
votes
2answers
254 views

What are the advantages of port scanning?

It seems like all the google results to this question answer what port scanning is, but go into little detail about how a pentester or hacker could use the information about what ports a network has ...
0
votes
1answer
67 views

What happens when attacker scan a IP that is used by multiple devices? [duplicate]

Assuming ISP gives only 1 external IP and you have few devices that use this IP. So you will have a router and few PC's with same external IP and different local IP. When all PC's are online and one ...
2
votes
1answer
88 views

How long does a secret URL need to be?

I'm currently creating a small service where users can upload images (just a free time project). The images are either private, public (unlisted) or public (listed). Now I'm wondering for public ...
0
votes
2answers
420 views

Nmap scanning with and without proxychains has different behaviour

I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333 On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
27
votes
4answers
3k views

Web sites executing local port scans: Is this coming from a library? Can it be blocked?

I recently read a piece by an infosec analyst who observed ebay.com doing a local port scan. I could not believe my eyes, but it was quickly reproduced by me (see below for my observation). I surfed ...
0
votes
0answers
111 views

Very odd traffic - is it legit?

While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
0
votes
0answers
183 views

Host not connected to my router shows up in a nmap scan

After scanning my local network with nmap, this host shows up listed as a nmap result but it is the only host that shows on nmap that is not listed as a client on my router list of connected devices. ...
1
vote
0answers
246 views

Concerns about Fing scanner [closed]

For years I have been using the Fing iOS app to scan my home network to check for unknown devices. The iOS apps is nice and self contained, so I never worried much about its own security. I recently ...
0
votes
1answer
110 views

Got requests to unpublished services. Am I being spied on?

Just today I'm migrating some of my webpages to a new server. After a couple hours the services was ready, I set up a hosts file with my domain example.com pointing to the server address, went to my ...
0
votes
1answer
123 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
0
votes
1answer
101 views

pycharm opening ports [closed]

By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on. Pycharm is a great tool for developer, but it seems fairly awful to me on the ...
1
vote
0answers
182 views

Is there an updated (non-Nmap) top 100 or top 1000 common ports list?

I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
1
vote
1answer
85 views

Local Scans initiated from a VLAN Broadcast IP address

Just reviewing some logs and I am seeing local scans to several local IP addresses on port 137 within my network. The source IP however is the broadcast IP of the VLAN (.255). I have checked the ...
2
votes
1answer
2k views

Unkown ip adress in my lan [duplicate]

While scanning my LAN with Angry IP Scanner, I found an ip @ that I didn't recognise 192.168.1.59: IP Ping Hostname MAC Address MAC Vendor ...
1
vote
1answer
175 views

Scapy: Sending forged Probe Requests and capturing them in a different device

Objective: Sending a forged Probe Request frame from one machine and capturing it on a second machine. I have two codes running: sender.py interface = sys.argv[1] dot11 = Dot11(addr1='ff:ff:ff:ff:...
1
vote
1answer
123 views

Is there any method or tool other than nmap for the detection of an OS?

I wanted to know if there was any other way to detect the OS of a network (other than nmap) since nmap doesn't detect most versions of Windows 10 at all and identifies them as a different OS ...
3
votes
1answer
488 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
-4
votes
2answers
410 views

How to Defend Against Port Scan Attacks

I was told that Hackers scan for open ports in random IPs and if they are open they hack the computer. What open ports can be hacked? How do I close the ports?
2
votes
0answers
149 views

Where to run long automated scans? [closed]

I'm trying to run some automated scans without stopping for long periods of time (each scan can take anywhere from 8 hours to 3 days). I currently don't have a PC I can leave running for many days ...
1
vote
0answers
48 views

Router reboots when doing port scan [closed]

This question is very much related to Router reboots when using Nmap, the difference is that I'm actually interested in a practical solution to this problem. I have a piece of C code that is doing ...
-4
votes
1answer
585 views

Pentesting: Active vs Passive Scan [closed]

I couldn't find answers to this question on this forum so I'm just gonna ask: What are Active Scans and Passive Scans? What are their differences? Please include in your answer(s): differences in ...
-2
votes
2answers
222 views

Did I just find a bug in CloudFlare or is this a feature?

While doing penetration testing for a client I stumbled upon a security incident. CloudFlare promises to hide the origin IP address when using its DNS. I went to dnsdumpster.com, inputted my client's ...
0
votes
1answer
237 views

Nmap scan slow on some IP ranges [closed]

I'm a security newbie trying to scan a VPN in the range 10.0.0.0 - 10.0.15.254 using nmap on Kali Linux. The routing table: route -n Kernel IP routing table Destination Gateway Genmask ...
0
votes
0answers
107 views

Port scanning - Idle scan 2.0?

I have some server applications and from time to time I'm being victim of some attacks which might be of interest and I'm going to describe in the following. The most recent attack originated from ...
0
votes
1answer
308 views

Firebase ports scanning using nmap

Purely for research purposes used nmap to check security of my application deployed to Firebase. However, there some questions which I can't understand: Why Firebase has open so many ports? Something ...
0
votes
1answer
313 views

Malicious IP addresses [closed]

I am looking for updated lists of IP addresses that belong to malware's C&C, botnets, malicious scanners, or other sort of malicious activities. Is there any public database of malicious IP ...
0
votes
1answer
162 views

Hardening against Nmap and other network scanners

It is possible to make Server respond with irrelevant data if it is scanned with Nmap? If yes, are there any examples of such SW?
0
votes
2answers
197 views

Can wireshark capture the exact payload and end point of API used by my Mobile APP?

I was just wondering if someone having total control over his/her network, is running my mobile app. Also wireshark is capturing all requests made using the network. My app is calling API endpoint ...
0
votes
1answer
224 views

Incorrect results via Nexpose, but displaying correct one with Nmap

We are scanning our network via Nexpose. Recently an asset was found vulnerable to Wannacry CVE 2017-0146 SMB Remote code execution vulnerability. However when i have tested it same through Nmap it ...
1
vote
0answers
1k views

How secure is my apartment's building wide wifi network using Spectrum Community Solutions?

Recently my apartment moved from having individual modems (with our own router/wifi network) to this Spectrum Community Solutions building wide network. Everyone can connect to the network anywhere, ...
-1
votes
1answer
69 views

Finding location of malicious internal IP in Wide Area Network [closed]

Malicious Traffic detected from an internal IP in Wide Area Network (Network of multiple cities in a country). How to find the city of that IP address in Wide Area Network? There is no IP subnet by ...

1
2 3 4 5
7