Re: fast nmap scan of XP boxes?

From: Juan B (juanbabi_at_yahoo.com)
Date: 10/29/05

  • Next message: Omar A. Herrera: "RE: Vuln Scanner" 
    Date: Sat, 29 Oct 2005 00:45:59 -0700 (PDT)
To: Daniel Miessler <daniel@dmiessler.com>, Michael Weber <mweber@alliednational.com>

    Scanrand is bettr for this task.

    Juan
    --- Daniel Miessler <daniel@dmiessler.com> wrote:

    >
    > On Aug 12, 2005, at 1:58 PM, Michael Weber wrote:
    >
    > > I am using nmap to create a list of targets that I
    > will then use other
    > > tools to test. My problem is how can I do a fast
    > scan of a large
    > > (class
    > > B) network of systems running XP, most with
    > firewalling turned on?
    > > Will
    > > nmap -sP still find the systems if ping does not?
    >
    > I have something just for you; I use it constantly
    > during assessments
    > just for this purpose:
    >
    > nmap -vv -n -sP
    > -PS21,22,23,25,53,80,110,135,139,143,445,1433,1521
    > $target | grep appears | grep up | cut -d" " -f2 >
    > $outfile
    >
    > What this does is "ping" the host via not just ICMP,
    > but also via TCP
    > connections on the ports listed. :) It makes great
    > lists and, as you
    > know, it saves tons of time when you import a list
    > of active hosts
    > instead of just feeding a network.
    >
    > Hope you like it. :) Oh, and here's my Nmap "Primer"
    > which has a
    > couple other decent nuggets:
    >
    > http://dmiessler.com/study/nmap
    >
    > --
    > Daniel R. Miessler
    > M: daniel@dmiessler.com
    > W: http://dmiessler.com
    > G: 0x316BC712
    >
    >
    >
    >
    >

            
                    
    __________________________________
    Yahoo! Mail - PC Magazine Editors' Choice 2005
    http://mail.yahoo.com

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------

  • Next message: Omar A. Herrera: "RE: Vuln Scanner"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • RE: Penetration test of 1 IP address
      ... Before I do anything very intrusive I personally go to the website ... Also remember once you have found a vulnerability, ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ...
      (Pen-Test)
    • Re: Whitespace in passwords
      ... input password is alphanumeric + special characters -- chances are strong ... >> Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Qualys
      ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping carts, ...
      (Pen-Test)