Scanning Class A network

tarunthenut_at_gmail.com
Date: 10/24/05

  • Next message: m123303_at_richmond.ac.uk: "Finding vhosts"
    Date: 24 Oct 2005 12:33:05 -0000
    To: pen-test@securityfocus.com
    
    
    ('binary' encoding is not supported, stored as-is) Hello All,
     Recently I was given a task to carry out a port scan of an entire valid
    Class A range (Dont ask me what the huge pool of valid IP's was for :) ).
    The scan needed to be carried out externally, and not from within the
    network to identify hosts and ports exposed to the Internet.
     The problem compounded cause of the following limitations :
    1. ICMP was not allowed in the network
    2. The IP range was to be scanned every month for the entire port range fro=
    m
    1-65535 for TCP & UDP
     After searching for a suitable scanner which could scan such a large range
    in reasonable time, I could think of only nmap, nessus, superscan and ISS.
     But because of the limitations stated above,all the tools took a huge
    amount of time (ran into month).
     I have struggled with options within the tools, tried configurable
    parameters (host time out, parallelism, RTT etc) and divided into smaller
    class C networks and scanned.but still the scan seems to take ages even if
    it is
     Any advise would be welcome :)
     
    Cheers
     tarunthenut

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------


  • Next message: m123303_at_richmond.ac.uk: "Finding vhosts"

    Relevant Pages

    • RE: Nessus 3.0 released
      ... > does not imply a scanner which is N times faster. ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping carts, ...
      (Pen-Test)
    • RE: [lists] What ever happened to the Netbios share scanner utilities?
      ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
      (Pen-Test)
    • Re: Scanning Class A network
      ... > Recently I was given a task to carry out a port scan of an entire valid ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • Re: Pen test, tcp/1404 found - advice needed
      ... Mr seKurity Wizard next time try searching for the port number on the ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • RE: Vuln Scanner
      ... There have been some free scanner projects that have come ... > other vulnerability scanner to compare the output. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Up to 75% of cyber attacks are launched on shopping ...
      (Pen-Test)