RE: winMap vs nmapNT
From: Marc Maiffret (marc@eeye.com)Date: 07/26/01
- Previous message: May, Jason S: "RE: Trace of 139 attack?"
- In reply to: Ivan: "winMap vs nmapNT"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Marc Maiffret" <marc@eeye.com> To: "Ivan" <ivan@incode.com.au>, <focus-ids@securityfocus.com>, <SECURITY-BASICS@securityfocus.com>, <focus-ms@securityfocus.com> Subject: RE: winMap vs nmapNT Date: Thu, 26 Jul 2001 10:22:26 -0700 Message-ID: <EIEOJCKGEPCLJHGCNNOPGENNEDAA.marc@eeye.com>
winmap is a connect() port scanner like the billion and one other ones out
there.
nmapNT is a port of nmap (the best freeware scanner) and so it has SYN
scanning and a lot of other stuff.
Also from the winmap page it says "Q: Why can't I use the SYN scan feature?
A: Presently the only known working platform for SYN scan is Windows
2000(tm). Some third-party windows socket implementations may work, but this
is yet to be confirmed. Windows 2000(tm) is a great improvement over all
previous Windows(tm) versions, so an upgrade is recommended. "
That is actually not correct... you can do SYN scanning from all versions of
windows.
Signed,
Marc Maiffret
Chief Hacking Officer
eEye Digital Security
T.949.349.9062
F.949.349.9538
http://eEye.com/Retina - Network Security Scanner
http://eEye.com/Iris - Network Traffic Analyzer
http://eEye.com/SecureIIS - Stop known and unknown IIS vulnerabilities
|-----Original Message-----
|From: Ivan [mailto:ivan@incode.com.au]
|Sent: Wednesday, July 25, 2001 5:01 PM
|To: focus-ids@securityfocus.com; SECURITY-BASICS@securityfocus.com;
|focus-ms@securityfocus.com
|Subject: winMap vs nmapNT
|
|
|Hi all,
| I started looking at winMap yesterday and
|http://labs.defcom.com/releases/winmap/
|
|did some comparison scanning vs nmapNT.
|winMap is quick, I would say that would be the only difference as they both
|found the same services on the targets. Not sure what the
|difference is when
|it comes to IDS such as snort picking the scans up?
|
|Anyone else had a play with it?
|
|Ivan
|
|
- Previous message: May, Jason S: "RE: Trace of 139 attack?"
- In reply to: Ivan: "winMap vs nmapNT"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
