Questions tagged [network-scanners]

Programs that map out a network to figure out which computers and services are available to be exploited.

Filter by
Sorted by
Tagged with
3
votes
1answer
151 views

SYN scan, determining scan vs large file upload

In a system attempting to detect SYN scans, one technique is to analyze the rate of change of (network packets sent from victim host per second). Processes such as uploading a large file would not be "...
3
votes
2answers
658 views

What is the key to detecting all IoT devices in your organization? [closed]

In recent news, IoT devices are a target of hackers -- specifically botnet herders. The first step to securing your organization and its users is to detect all IoT devices that are functional on your ...
3
votes
1answer
552 views

Nmap scan comparison show change in ports

I am going to try explaining my question in the simplest way possible. I have a script which uses nmap to scan for open ports and save the result in a file. The next time it scans a host it moves the ...
3
votes
2answers
965 views

Is there a form to know the PostgreSQL version using nmap?

I tried using the following command: nmap -p 5432 -v --script pgsql-brute myhost But I got no output related to the pgsql script nor the dbms version.
3
votes
1answer
782 views

Automating NIKTO scanner

I am working on NIKTO automation. I have a text file contains list of IP addresses along with their ports open. I have already made nikto script. Script functionality - it takes IP addresses and then ...
3
votes
1answer
784 views

What is known about the sirefef/zeroaccess malware/botnet?

There appears to be an increase in p2p communication among botnets that has been attributed to the sirefef/zeroaccess malware botnet. What is known on this particular threat?
3
votes
1answer
8k views

Scan for mobile phones?

I'd like to measure queuing time, similar to what they're doing in Finland. Instead of detecting bluetooth (which is disabled in most phones) I thought of detecting EDGE/3G. I'd like to log the ...
3
votes
1answer
137 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
2
votes
2answers
5k views

Questionable request to /user/soapCaller.bs

My webserver logs revealed a request to /user/soapCaller.bs from 220.226.188.32, which maps to Mumbai, India. The HTTP user agent is called 'Morpheus * Scanner'. My server returned a 404 error. ...
2
votes
2answers
9k views

How to block network scans with pfsense?

I am using pfsense as a firewall, and I would like to know how I can stop network scans from enumerating open services and ports.
2
votes
2answers
2k views

SYN scan, TCP packet question

during SYN scans, many small tcp packets are sent to multiple ports to determine which ports are open or not. But when you're streaming media, aren't you receiving many One type of ID system, the ...
2
votes
1answer
9k views

Netdiscover running on NAT interface not finding IP addresses on host-only network?

I am practicing penetration testing techniques using Kali Linux (most recent distro) and various vulnerable virtual machines (DVWA, Metasplotiable). My attack and targets are all running via VMPlayer....
2
votes
4answers
678 views

Router Receiving Unknown Packets from the Same IP and Port Even After Address Rotations - How?

One of our client's routers is receiving packets from the same source IP address and port repeatedly, even when the router is rebooted and obtains a fresh dynamically assigned IP address, and while no ...
2
votes
2answers
29k views

How to find list of IP address in a network with multiple subnets?

There are many subnets connected via a router in the same network. I need to find list of all IP address available in each different subnet. I am able to get the list of IP address available in the ...
2
votes
2answers
2k views

Is an ARP scan stealthy?

If you want to discover the live hosts on your subnetwork how can you exploit the ARP protocol in order to scan stealthily? Would an arp scan be picked up as suspicious activity? Could you spoof ...
2
votes
2answers
2k views

Any way to circumvent a 'filtered' response on NMap?

I know that a filtered response on NMap means that the firewall dropped the packets or that NMap just didn't receive a response, but is there any way to circumvent this? Is it possible that the ...
2
votes
1answer
1k views

Disabling Ping/ICMP Requests [duplicate]

Are there any benefits from disabling Ping/ICMP requests on servers? I've read where people say to do it but I can't seem to find any real benefits with it. Only more likely to cause more problems. ...
2
votes
1answer
86 views

Named connections all over the world

I just started working for a small business and run their server. The entire thing is on macOS, and I've been monitoring my network lately due to some weird things in a few log files. I've come ...
2
votes
2answers
3k views

Most efficient way to scan for webservers

Lets say I want to scan a large amount of ip addresses for webservers running on port 80 (aware that there are other ports for webservers, ignoring for example). What would be the most efficient way ...
2
votes
3answers
5k views

How to scan for ports opened by TCP/UDP sockets with nmap or any other tool?

I'm new to nmap and I've been digging with it lately to scan some devices on the current LAN for ports opened by socket programs which are running. First I ran a simple UDP server on my machine on ...
2
votes
2answers
476 views

nmap - Difference between “Filtered” and “Admin-Prohibited”

I am a rather new user to nmap. By using some Google-Fu, I am still not able to ascertain what is the criteria used in order to distinguish "filtered" ports from "admin-prohibited" as they both seem ...
2
votes
1answer
539 views

How to perform a port scan against a target with a software-based firewall?

I use NMAP to perform port scanning, e.g., TCP SYN scan: nmap -sS 192.168.0.12. I've two virtual machines running Windows XP and Windows 7, respetively. These have several services running, e.g., ...
2
votes
1answer
1k views

A PC constantly scans my network for IP addresses using ARP

Using wireshark I have found that one PC on my network constantly scans for devices on the network using ARP, e.g. Who has 192.168.0.26? Tell 192.168.0.10 It does that approx. 2 times a second and ...
2
votes
1answer
318 views

How to perform an idle scan against a target using Nmap with a list of zombies? [closed]

I want to perform port scan against a target but the firewall at the target only allows traffic to the ports through certain IP address/machines. I tried to perform an idle scan in Nmap but it only ...
2
votes
1answer
105 views

Finding Targets in Foreign Network

Say you popped into a network after exploiting something, and you are looking to further infiltrate the network. When theorizing in my head I realized the local ip's can change themselves. So doing ...
2
votes
2answers
975 views

NMAP DNS Resolution

By default NMAP does reverse DNS resolution for a given IP which responds to the host discovery probes. My question is, what are the benefits of getting the host name when performing a network scan?
2
votes
1answer
454 views

Caching ARP to avoid L2 detection on switched network?

Using nmap on a very large (/16) switched network can lead to an excessive number of ARP requests which can be detected by simple ARP counters listening to broadcasted ARP requests. Is there a way ...
2
votes
1answer
317 views

NMAP Scan Returns Odd OS Detection [closed]

I am new to NMAP but I was using it to troubleshoot some issues I have been having. I ran a scan on a device and I know the device runs some sort of Linux or Ubuntu OS and I was attempting to figure ...
2
votes
2answers
3k views

Nmap scanning computers behind a wireless modem [closed]

Let's suppose that I have a router and three computers connected to Internet through that router. When I tried to get the external IP address for each computer, I got the same address. I think this ...
2
votes
1answer
120 views

Can we build network topology using passive fingerprinting?

Can we use the tools such as P0f, OSSIM and other passive fingerprinting tools to build a comprehensive network topology of how the devices are interconnected ? or is there a passive finger printing ...
2
votes
2answers
6k views

Import nmap scan results into OpenVAS

I have recently been introduced to OpenVAS for scanning our network at work. I am familiar with nmap, and I am happy with it's performance when used stand-alone from the cli, through iptraf I can see ...
2
votes
1answer
768 views

What OpenVAS tasks (scans) should I be running?

I have recently set up OpenVAS on my local office network. I have run a few tasks but I was curious on what tasks I should really be running and within what timeframes? clarification I'm currently ...
2
votes
1answer
206 views

Tracking down Malware within home network

My home network has been shutoff by my Internet Provider twice now because it is "trying to gain access to unauthorized resources" within the Internet provider's network. I am trying to track down ...
2
votes
2answers
758 views

How does Nessus know which services are running in a host?

I'd like to know how does a vulnerability scanner such as Nessus know which services are running, once it has scanned the ports. I don't want to know the steps to do this in Nessus, I want to know ...
2
votes
1answer
406 views

Hiding packets, requests, traffic from my PC through Ethernet connected to workplace network

Before everyone jumps on the bandwagon, as I so often see, of saying you shouldn't do anything on a workplace network that is to be done annonymously on your own home network, I want to know an actual ...
2
votes
1answer
4k views

What is the fastest way to scan all ports of a single machine

I am doing some research and I need a very quick way to scan for open ports on a single machine. To provide some context, I know that my machine will have a port open waiting for UDP packets for about ...
2
votes
2answers
2k views

Can't successfully do an idle scan

I have Kali Linux installed in VirtualBox and would like to do an idle scan. For this I need to find a suitable zombie PC. I'm using the ipidseq script to find one. The script finds some IP addresses ...
2
votes
1answer
209 views

Does nmap limit probes when using time limiting on decoy scans?

If I set a rate limit (e.g. -T1) on an nmap scan that uses decoys, does the rate limit apply to all probes, or just each individual source? I checked the documentation, but can't see anything specific....
2
votes
1answer
1k views

Wireshark detecting suspicious messages through jabber protocol, It says it is from my website, no idea what it is

I was doing a network scan on my computer with Wireshark and came up with something very suspicious: I found a stream with the jabber protocol. I do not have a jabber server set up nor do I have any ...
2
votes
2answers
981 views

Suspect Exchange Server appears to be hacked. How to determine if it was a false positive?

Our security vendor detected that our client's CAS server was doing a nessus scan in the internal network. It's not uncommon for this vendor to issue a false positive, but I'm looking for general ...
2
votes
1answer
170 views

Network abnormally slow during night hours

My network recently the last week as become abnormally slow around 11 pm. Very slow buffering youtube videos during all hours. Ive recently purchased the new router about two months ago but not ...
2
votes
1answer
4k views

Detected Port Scanning Attack in ESET Smart Security

I receive a number of notifications from ESET Smart Security about Port Scanning attack. But I'm behind a router. But as far as I know, computers behind a router is not accessible from others (Please ...
2
votes
2answers
334 views

Scan Novell NetWare backend with Windows servers and clients

Could anyone provide some insight on performing an internal vulnerability assessment regarding Novell NetWare as the backend with client workstations and servers running various versions of Windows? ...
2
votes
1answer
85 views

Unkown ip adress in my lan [duplicate]

While scanning my LAN with Angry IP Scanner, I found an ip @ that I didn't recognise 192.168.1.59: IP Ping Hostname MAC Address MAC ...
2
votes
1answer
272 views

Nessus Target Availability

I need to write a script (I am not asking for script !) in order to verify if target Servers are available (Up or Down) for Nessus scan or not. The problem is that, sometimes even if ping does not ...
2
votes
2answers
211 views

Legally port scanning (Whitelist)

I am attempting to set up a security vulnerability scanning server. I have several customers interested in using it to scan their systems. I will be port scanning and carrying out intrusion detection, ...
2
votes
2answers
1k views

Internal / external Penetration testing a webserver - PCI

the PCI DSS document states: 11.3.2 Perform internal penetration testing at least annually and after any significant infrastructure or application upgrade or modification (such as an operating ...
2
votes
4answers
7k views

Determining false positives when scanning for live hosts with Nmap

When doing a vulnerability assessment on a large network, it seems general practice to determine which hosts on the network are live. This can be done in various ways. From what I have read it is ...
2
votes
0answers
146 views

Where to run long automated scans? [closed]

I'm trying to run some automated scans without stopping for long periods of time (each scan can take anywhere from 8 hours to 3 days). I currently don't have a PC I can leave running for many days ...
2
votes
1answer
680 views

How to “Scan for hosts” only using ettercap (“text”) terminal interface?

I've been looking for a command to "Scan for hosts" in terminal ("text") ettercap. Do anyone knows how to scan the local subnet from the ettercap terminal? The graphical ("gtk") ettercap has the ...