Re: How can I erase my fingertips .

From: Kris Kennaway (kris@obsecurity.org)
Date: 03/29/02


Date: Thu, 28 Mar 2002 18:28:25 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Moti Levy <moti@flncs.com>


On Thu, Mar 28, 2002 at 03:03:27PM -0500, Moti Levy wrote:
> I want to stop nmap from detecting my os .

You might be able to fool (the current version of) nmap, but it's
impossible to remove the characteristic features which allow one to
distinguish between one IP stack and another.

Kris



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Relevant Pages

  • fooling version detection
    ... Of course I can exchange banners, but only nmap is stupid enough to be ... Maybe I use wrong keywords ("fool nmap", "obfuscate version detection" ...
    (comp.os.linux.security)
  • Re: ipfw+syn
    ... > but i ran nmap as root. ... i'm not fool. ... Perhaps the problem is that the _fragments_ are denied by ipfw? ... Can you successfully run nmap without the -f flag? ...
    (FreeBSD-Security)
  • Re: hiding OS name
    ... # TCP_DROP_SYNFIN adds support for ignoring TCP packets with SYN+FIN. ... # prevents nmap et al. from identifying the TCP/IP stack, ... > scanned by something like nmap using the OS detection, ... >> with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: How can I erase my fingertips .
    ... On 28 Mar, Moti Levy wrote: ... > I want to stop nmap from detecting my os. ... If you use ipfilter, use this rule: ... These should do a reasonably good job of hiding your from NMAP scans. ...
    (FreeBSD-Security)
  • Re: How can I erase my fingertips .
    ... March 2002 21:25, Alvaro Pereira wrote: ... >> I want to stop nmap from detecting my os. ... -- The Unix programmers handbook, ...
    (FreeBSD-Security)