Re: Scanning Class A network

From: Cesar Osorio (COsorio_at_awb.com.au)
Date: 10/24/05

  • Next message: Terry Vernon: "Re: Blocking Port scans" 
    Date: Tue, 25 Oct 2005 07:16:09 +1000
To: "tarunthenut" <tarunthenut@gmail.com>, "pen-test" <pen-test@securityfocus.com>

    Paketto- scanrad. !!?, is aparently a bit faster. -------------------------- Sent from my BlackBerry Wireless Handheld ----- Original Message ----- From: tarunthenut Sent: 24/10/2005 10:33 PM To: pen-test@securityfocus.com Subject: Scanning Class A network Hello All, Recently I was given a task to carry out a port scan of an entire valid Class A range (Dont ask me what the huge pool of valid IP's was for :) ). The scan needed to be carried out externally, and not from within the network to identify hosts and ports exposed to the Internet. The problem compounded cause of the following limitations : 1. ICMP was not allowed in the network 2. The IP range was to be scanned every month for the entire port range fro= m 1-65535 for TCP & UDP After searching for a suitable scanner which could scan such a large range in reasonable time, I could think of only nmap, nessus, superscan and ISS. But because of the limitations stated above,all the tools took a huge amount of time (ran into month). I have struggled with options within the tools, tried configurable parameters (host time out, parallelism, RTT etc) and divided into smaller class C networks and scanned.but still the scan seems to take ages even if it is Any advise would be welcome :) Cheers tarunthenut ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 ------------------------------------------------------------------------------- _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "NOTICE This email and any attachments are confidential and are intended only for the use of the named recipient. They may contain legally privileged information and are subject to copyright. You must not read, copy, use or disclose them without our prior written consent. If you have received this email in error please notify us on (03) 9209 2000 or by return email and then delete both messages. We do not warrant that this email or any attachments are error or virus free or that this communication is secure and accept no liability for computer viruses, data corruption, delay, interruption, unauthorised access or unauthorised amendment."

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------

  • Next message: Terry Vernon: "Re: Blocking Port scans"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: ideal OS distro for network scanning?
      ... ideal OS distro for network scanning? ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: Penetration test of 1 IP address
      ... Before I do anything very intrusive I personally go to the website ... Also remember once you have found a vulnerability, ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ...
      (Pen-Test)
    • Re: Whitespace in passwords
      ... input password is alphanumeric + special characters -- chances are strong ... >> Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)