....da incapace penso.
Comunque:
-ho un IP
-l'IP è esterno alla mia rete
-l'IP in questione risponde al ping
-faccio nmap su quell'IP
-nmap non mi dà nessun output e sta ore con solo la righina in cui è scritto www.insecure.org/nmap ecc. ecc.
Why?
....da incapace penso.
Comunque:
-ho un IP
-l'IP è esterno alla mia rete
-l'IP in questione risponde al ping
-faccio nmap su quell'IP
-nmap non mi dà nessun output e sta ore con solo la righina in cui è scritto www.insecure.org/nmap ecc. ecc.
Why?
Lo stupido non si accontenta di violare una regola etica: pretende che la sua trasgressione diventi una nuova regola.
La sparo: che abbia una difesa contro gli nmap??
Pensato anch'io... in pratica nmap dovrebbe mandare dei pacchetti alle porte in un determinato modo e queste dovrebbero rispondere (l'ho detta male e forse anche sbagliata lo so, sono in fase di apprendimento....). L'admin può fare in modo che le porte aperte non rispondano alla chiamata di nmap per cercare di non dare info sul sistema.
Se non sbaglio però esiste una switch di namp che fa in modo che le porte da cui si ha risposta siano quelle chiuse (che quindi vengono ignorate nell'output), e quelle che non rispondono vengano segnate come open nell'output.... solo che non ricordo qual è la switch......
Lo stupido non si accontenta di violare una regola etica: pretende che la sua trasgressione diventi una nuova regola.
Che genere di scansione fai?Originariamente inviato da enterpris
-faccio nmap su quell'IP
L'host viene riconosciuto come up?-nmap non mi dà nessun output e sta ore con solo la righina in cui è scritto www.insecure.org/nmap ecc. ecc.
Faccio
"nmap -sS -O IP"
Non so.... esce la righina iniziale e dopo molto tempo "caught SIGINT signal, cleaning up"; l'host in quel momento risponde al ping e alle connessioni http tramite browser.
Lo stupido non si accontenta di violare una regola etica: pretende che la sua trasgressione diventi una nuova regola.
Il SYN scan è la scelta di default per utenti root, quindi puoi anche non specificarloOriginariamente inviato da enterpris
Faccio
"nmap -sS -O IP"
Non so.... esce la righina iniziale e dopo molto tempo "caught SIGINT signal, cleaning up"; l'host in quel momento risponde al ping e alle connessioni http tramite browser.
Prova a non usare il fingerprinting, nove su dieci è quello che fa casino
Inoltre ci sono modi più facili e funzionali per controllare l'OS di un sistema remoto... nmap spesso con il fingerprintng e il version detection fa un casino assurdo e tira pacchi
Immaginavo ci fossero ma non li conosco... quali sono questi modi?Originariamente inviato da maiosyet_2
Inoltre ci sono modi più facili e funzionali per controllare l'OS di un sistema remoto... nmap spesso con il fingerprintng e il version detection fa un casino assurdo e tira pacchi
Lo stupido non si accontenta di violare una regola etica: pretende che la sua trasgressione diventi una nuova regola.
Si ma che c'entra questo con nmap?Originariamente inviato da enterpris
Immaginavo ci fossero ma non li conosco... quali sono questi modi?
Comunque, genera con telnet una 404 sul server web e quasi sempre ti dirà quello che vuoi sapere...
Sul mio server locale, ad esempio:
Altrimenti... però continiuamo a essere OTcodice:... <address>Apache/2.0.52 (Gentoo/Linux) mod_ssl/2.0.52 OpenSSL/0.9.7d PHP/4.3.9 Server at alcibiade.nsa.sux Port 80</address> ...
Lo scan senza -O ha dato il seguente risultato:
codice:Starting nmap 3.20 ( www.insecure.org/nmap/ ) at 2005-01-13 00:29 CET Interesting ports on 83.1XX.XX.XX: (The 987 ports scanned but not shown below are in state: closed) Port State Service 4/tcp filtered unknown 6/tcp filtered unknown 12/tcp filtered unknown 14/tcp filtered unknown 17/tcp filtered qotd 18/tcp filtered msp 19/tcp filtered chargen 20/tcp filtered ftp-data 21/tcp open ftp 22/tcp open ssh 25/tcp filtered smtp 30/tcp filtered unknown 32/tcp filtered unknown 35/tcp filtered priv-print 36/tcp filtered unknown 39/tcp filtered rlp 42/tcp filtered nameserver 46/tcp filtered mpm-snd 47/tcp filtered ni-ftp 48/tcp filtered auditd 49/tcp filtered tacacs 53/tcp filtered domain 54/tcp filtered xns-ch 57/tcp filtered priv-term 70/tcp filtered gopher 77/tcp filtered priv-rje 78/tcp filtered vettcp 80/tcp open http 82/tcp filtered xfer 90/tcp filtered dnsix 95/tcp filtered supdup 96/tcp filtered dixie 98/tcp filtered linuxconf 99/tcp filtered metagram 101/tcp filtered hostname 106/tcp filtered pop3pw 107/tcp filtered rtelnet 108/tcp filtered snagas 109/tcp filtered pop-2 110/tcp filtered pop-3 111/tcp open sunrpc 112/tcp filtered mcidas 119/tcp filtered nntp 120/tcp filtered cfdptkt 125/tcp filtered locus-map 128/tcp filtered gss-xlicen 133/tcp filtered statsrv 140/tcp filtered emfis-data 144/tcp filtered news 148/tcp filtered cronus 149/tcp filtered aed-512 155/tcp filtered netsc-dev 157/tcp filtered knet-cmp 161/tcp filtered snmp 169/tcp filtered send 170/tcp filtered print-srv 174/tcp filtered mailq 175/tcp filtered vmnet 179/tcp filtered bgp 180/tcp filtered ris 181/tcp filtered unify 183/tcp filtered ocbinder 187/tcp filtered aci 188/tcp filtered mumps 190/tcp filtered gacp 192/tcp filtered osu-nms 197/tcp filtered dls 200/tcp filtered src 201/tcp filtered at-rtmp 202/tcp filtered at-nbp 204/tcp filtered at-echo 206/tcp filtered at-zis 211/tcp filtered 914c-g 212/tcp filtered anet 215/tcp filtered softpc 217/tcp filtered dbase 218/tcp filtered mpp 224/tcp filtered unknown 227/tcp filtered unknown 228/tcp filtered unknown 230/tcp filtered unknown 231/tcp filtered unknown 233/tcp filtered unknown 234/tcp filtered unknown 236/tcp filtered unknown 238/tcp filtered unknown 239/tcp filtered unknown 241/tcp filtered unknown 242/tcp filtered direct 245/tcp filtered link 246/tcp filtered dsp3270 247/tcp filtered subntbcst_tftp 249/tcp filtered unknown 251/tcp filtered unknown 253/tcp filtered unknown 259/tcp filtered esro-gen 261/tcp filtered nsiiops 263/tcp filtered hdap 265/tcp filtered maybeFW1 270/tcp filtered unknown 271/tcp filtered unknown 272/tcp filtered unknown 274/tcp filtered unknown 276/tcp filtered unknown 279/tcp filtered unknown 282/tcp filtered cableport-ax 283/tcp filtered unknown 286/tcp filtered unknown 289/tcp filtered unknown 293/tcp filtered unknown 295/tcp filtered unknown 297/tcp filtered unknown 298/tcp filtered unknown 299/tcp filtered unknown 301/tcp filtered unknown 304/tcp filtered unknown 306/tcp filtered unknown 313/tcp filtered magenta-logic 316/tcp filtered decauth 317/tcp filtered zannet 319/tcp filtered unknown 321/tcp filtered pip 323/tcp filtered unknown 325/tcp filtered unknown 326/tcp filtered unknown 332/tcp filtered unknown 335/tcp filtered unknown 337/tcp filtered unknown 341/tcp filtered unknown 342/tcp filtered unknown 343/tcp filtered unknown 344/tcp filtered pdap 346/tcp filtered zserv 348/tcp filtered csi-sgwp 349/tcp filtered mftp 350/tcp filtered matip-type-a 352/tcp filtered dtag-ste-sb 353/tcp filtered ndsauth 354/tcp filtered bh611 356/tcp filtered cloanto-net-1 361/tcp filtered semantix 362/tcp filtered srssend 364/tcp filtered aurora-cmgr 366/tcp filtered odmr 369/tcp filtered rpc2portmap 371/tcp filtered clearcase 372/tcp filtered ulistserv 377/tcp filtered tnETOS 383/tcp filtered hp-alarm-mgr 385/tcp filtered ibm-app 388/tcp filtered unidata-ldm 391/tcp filtered synotics-relay 393/tcp filtered dis 394/tcp filtered embl-ndt 403/tcp filtered decap 408/tcp filtered prm-sm 410/tcp filtered decladebug 413/tcp filtered smsp 414/tcp filtered infoseek 416/tcp filtered silverplatter 419/tcp filtered ariel1 420/tcp filtered smpte 422/tcp filtered ariel3 426/tcp filtered smartsdp 427/tcp filtered svrloc 430/tcp filtered utmpsd 431/tcp filtered utmpcd 432/tcp filtered iasd 435/tcp filtered mobilip-mn 436/tcp filtered dna-cml 437/tcp filtered comscm 438/tcp filtered dsfgw 441/tcp filtered decvms-sysmgt 442/tcp filtered cvc_hostd 443/tcp open https 444/tcp filtered snpp 445/tcp filtered microsoft-ds 451/tcp filtered sfs-smp-net 455/tcp filtered creativepartnr 460/tcp filtered skronk 462/tcp filtered datasurfsrvsec 463/tcp filtered alpes 466/tcp filtered digital-vrc 469/tcp filtered rcp 472/tcp filtered ljk-login 475/tcp filtered tcpnethaspsrv 477/tcp filtered ss7ns 482/tcp filtered bgs-nsi 483/tcp filtered ulpnet 485/tcp filtered powerburst 486/tcp filtered sstats 487/tcp filtered saft 489/tcp filtered nest-protocol 492/tcp filtered ticf-1 495/tcp filtered intecourier 496/tcp filtered pim-rp-disc 506/tcp filtered ohimsrv 507/tcp filtered crs 509/tcp filtered snare 511/tcp filtered passgo 512/tcp filtered exec 513/tcp filtered login 525/tcp filtered timed 526/tcp filtered tempo 527/tcp filtered stx 530/tcp filtered courier 532/tcp filtered netnews 534/tcp filtered mm-admin 538/tcp filtered gdomap 543/tcp filtered klogin 549/tcp filtered idfp 551/tcp filtered cybercash 552/tcp filtered deviceshare 553/tcp filtered pirp 555/tcp filtered dsf 558/tcp filtered sdnskmp 559/tcp filtered teedtap 564/tcp filtered 9pfs 567/tcp filtered banyan-rpc 569/tcp filtered ms-rome 570/tcp filtered meter 572/tcp filtered sonar 573/tcp filtered banyan-vip 574/tcp filtered ftp-agent 575/tcp filtered vemmi 586/tcp filtered password-chg 588/tcp filtered cal 589/tcp filtered eyelink 590/tcp filtered tns-cml 596/tcp filtered smsd 599/tcp filtered acp 600/tcp filtered ipcserver 601/tcp filtered unknown 602/tcp filtered unknown 603/tcp filtered unknown 606/tcp filtered urm 607/tcp filtered nqs 608/tcp filtered sift-uft 610/tcp filtered npmp-local 611/tcp filtered npmp-gui 616/tcp filtered unknown 618/tcp filtered unknown 622/tcp filtered unknown 624/tcp filtered unknown 628/tcp filtered qmqp 631/tcp open ipp 637/tcp filtered lanserver 651/tcp filtered unknown 653/tcp filtered unknown 654/tcp filtered unknown 655/tcp filtered unknown 656/tcp filtered unknown 658/tcp filtered unknown 659/tcp filtered unknown 660/tcp filtered mac-srvr-admin 661/tcp filtered unknown 668/tcp filtered unknown 670/tcp filtered unknown 671/tcp filtered unknown 673/tcp filtered unknown 676/tcp filtered unknown 681/tcp filtered unknown 686/tcp filtered unknown 687/tcp filtered unknown 690/tcp filtered unknown 694/tcp filtered unknown 695/tcp filtered unknown 704/tcp filtered elcsd 705/tcp filtered unknown 706/tcp filtered silc 707/tcp filtered unknown 714/tcp filtered unknown 715/tcp filtered unknown 722/tcp filtered unknown 723/tcp filtered unknown 725/tcp filtered unknown 726/tcp filtered unknown 729/tcp filtered netviewdm1 731/tcp filtered netviewdm3 732/tcp filtered unknown 733/tcp filtered unknown 736/tcp filtered unknown 738/tcp filtered unknown 739/tcp filtered unknown 741/tcp filtered netgw
Lo stupido non si accontenta di violare una regola etica: pretende che la sua trasgressione diventi una nuova regola.
codice:742/tcp filtered netrcs 744/tcp filtered flexlm 746/tcp filtered unknown 749/tcp filtered kerberos-adm 752/tcp filtered qrh 756/tcp filtered unknown 760/tcp filtered krbupdate 762/tcp filtered quotad 770/tcp filtered cadlock 772/tcp filtered cycleserv2 774/tcp filtered rpasswd 779/tcp filtered unknown 781/tcp filtered hp-collector 791/tcp filtered unknown 795/tcp filtered unknown 797/tcp filtered unknown 799/tcp filtered controlit 802/tcp filtered unknown 805/tcp filtered unknown 806/tcp filtered unknown 807/tcp filtered unknown 808/tcp filtered unknown 809/tcp filtered unknown 811/tcp filtered unknown 813/tcp filtered unknown 814/tcp filtered unknown 819/tcp filtered unknown 823/tcp filtered unknown 825/tcp filtered unknown 829/tcp filtered unknown 833/tcp filtered unknown 834/tcp filtered unknown 835/tcp filtered unknown 837/tcp filtered unknown 839/tcp filtered unknown 840/tcp filtered unknown 842/tcp filtered unknown 845/tcp filtered unknown 849/tcp filtered unknown 857/tcp filtered unknown 858/tcp filtered unknown 859/tcp filtered unknown 860/tcp filtered unknown 861/tcp filtered unknown 862/tcp filtered unknown 864/tcp filtered unknown 865/tcp filtered unknown 878/tcp filtered unknown 885/tcp filtered unknown 886/tcp filtered unknown 889/tcp filtered unknown 891/tcp filtered unknown 894/tcp filtered unknown 895/tcp filtered unknown 897/tcp filtered unknown 899/tcp filtered unknown 906/tcp filtered unknown 908/tcp filtered unknown 910/tcp filtered unknown 911/tcp filtered unknown 913/tcp filtered unknown 915/tcp filtered unknown 916/tcp filtered unknown 921/tcp filtered unknown 923/tcp filtered unknown 925/tcp filtered unknown 926/tcp filtered unknown 927/tcp filtered unknown 929/tcp filtered unknown 931/tcp filtered unknown 935/tcp filtered unknown 939/tcp filtered unknown 941/tcp filtered unknown 942/tcp filtered unknown 947/tcp filtered unknown 948/tcp filtered unknown 949/tcp filtered unknown 952/tcp filtered unknown 959/tcp filtered unknown 961/tcp filtered unknown 963/tcp filtered unknown 964/tcp filtered unknown 965/tcp filtered unknown 968/tcp filtered unknown 969/tcp filtered unknown 970/tcp filtered unknown 973/tcp filtered unknown 980/tcp filtered unknown 983/tcp filtered unknown 984/tcp filtered unknown 988/tcp filtered unknown 991/tcp filtered unknown 992/tcp filtered telnets 994/tcp filtered ircs 996/tcp filtered xtreelic 999/tcp filtered garcon 1002/tcp filtered unknown 1004/tcp filtered unknown 1005/tcp filtered unknown 1011/tcp filtered unknown 1017/tcp filtered unknown 1018/tcp filtered unknown 1022/tcp filtered unknown 1024/tcp filtered kdm 1026/tcp filtered LSA-or-nterm 1031/tcp filtered iad2 1032/tcp filtered iad3 1058/tcp filtered nim 1139/tcp filtered cce3x 1155/tcp filtered nfa 1212/tcp filtered lupa 1220/tcp filtered quicktime 1222/tcp filtered nerv 1248/tcp filtered hermes 1346/tcp filtered alta-ana-lm 1350/tcp filtered editbench 1352/tcp filtered lotusnotes 1353/tcp filtered relief 1354/tcp filtered rightbrain 1355/tcp filtered intuitive-edge 1359/tcp filtered ftsrv 1365/tcp filtered adapt-sna 1366/tcp filtered netware-csp 1367/tcp filtered dcs 1368/tcp filtered screencast 1370/tcp filtered us-gv 1373/tcp filtered chromagrafx 1374/tcp filtered molly 1378/tcp filtered elan 1380/tcp filtered telesis-licman 1381/tcp filtered apple-licman 1385/tcp filtered atex_elmd 1388/tcp filtered objective-dbc 1394/tcp filtered iclpv-nlc 1395/tcp filtered iclpv-wsm 1398/tcp filtered video-activmail 1401/tcp filtered goldleaf-licman 1402/tcp filtered prm-sm-np 1404/tcp filtered igi-lm 1405/tcp filtered ibm-res 1412/tcp filtered innosys 1423/tcp filtered essbase 1431/tcp filtered rgtp 1433/tcp filtered ms-sql-s 1436/tcp filtered sas-2 1437/tcp filtered tabula 1439/tcp filtered eicon-x25 1443/tcp filtered ies-lm 1446/tcp filtered ora-lm 1450/tcp filtered dwf 1452/tcp filtered gtegsc-lm 1453/tcp filtered genie-lm 1464/tcp filtered msl_lmd 1469/tcp filtered aal-lm 1470/tcp filtered uaiact 1471/tcp filtered csdmbase 1472/tcp filtered csdm 1473/tcp filtered openmath 1476/tcp filtered clvm-cfg 1478/tcp filtered ms-sna-base 1479/tcp filtered dberegister 1480/tcp filtered pacerforum 1481/tcp filtered airs 1483/tcp filtered afs 1487/tcp filtered localinfosrvr 1489/tcp filtered dmdocbroker 1490/tcp filtered insitu-conf 1495/tcp filtered cvc 1503/tcp filtered imtc-mcs 1506/tcp filtered utcd 1507/tcp filtered symplex 1508/tcp filtered diagmond 1513/tcp filtered fujitsu-dtc 1514/tcp filtered fujitsu-dtcns 1515/tcp filtered ifor-protocol 1517/tcp filtered vpac 1518/tcp filtered vpvd 1520/tcp filtered atm-zip-office 1521/tcp filtered oracle 1525/tcp filtered orasrv 1526/tcp filtered pdap-np 1529/tcp filtered support 1535/tcp filtered ampr-info 1538/tcp filtered 3ds-lm 1540/tcp filtered rds 1541/tcp filtered rds2 1542/tcp filtered gridgen-elmd 1543/tcp filtered simba-cs 1544/tcp filtered aspeclmd 1545/tcp filtered vistium-share 1547/tcp filtered laplink 1548/tcp filtered axon-lm 1663/tcp filtered netview-aix-3 1667/tcp filtered netview-aix-7 1668/tcp filtered netview-aix-8 1670/tcp filtered netview-aix-10 1680/tcp filtered CarbonCopy 1723/tcp filtered pptp 1755/tcp filtered wms 1827/tcp filtered pcm 1900/tcp filtered UPnP 1986/tcp filtered licensedaemon 1987/tcp filtered tr-rsrb-p1 1990/tcp filtered stun-p1 1991/tcp filtered stun-p2 1992/tcp filtered stun-p3 1995/tcp filtered perf-port 1998/tcp filtered x25-svc-port 2000/tcp filtered callbook 2001/tcp filtered dc 2006/tcp filtered invokator 2007/tcp filtered dectalk 2009/tcp filtered news 2010/tcp filtered search 2012/tcp filtered ttyinfo 2016/tcp filtered bootserver 2017/tcp filtered cypress-stat 2018/tcp filtered terminaldb 2019/tcp filtered whosockami 2024/tcp filtered xinuexpansion4 2026/tcp filtered scrabble 2033/tcp filtered glogger 2034/tcp filtered scoremgr 2035/tcp filtered imsldoc 2038/tcp filtered objectmanager 2040/tcp filtered lam 2043/tcp filtered isis-bcast 2044/tcp filtered rimsl 2048/tcp filtered dls-monitor 2049/tcp filtered nfs 2067/tcp filtered dlswpn 2105/tcp filtered eklogin 2108/tcp filtered rkinit 2112/tcp filtered kip 2241/tcp filtered ivsd 2301/tcp filtered compaqdiag 2401/tcp filtered cvspserver 2432/tcp filtered codasrv 2501/tcp filtered rtsclient 2600/tcp filtered zebrasrv 2601/tcp filtered zebra 2605/tcp filtered bgpd 2638/tcp filtered sybase 2766/tcp filtered listen 3005/tcp filtered deslogin 3006/tcp filtered deslogind 3049/tcp filtered cfs 3064/tcp filtered dnet-tstproxy 3128/tcp filtered squid-http 3269/tcp filtered globalcatLDAPssl 3306/tcp open mysql 3372/tcp filtered msdtc 3421/tcp filtered bmap 3456/tcp filtered vat 3457/tcp filtered vat-control 3900/tcp filtered udt_os 3984/tcp filtered mapper-nodemgr 3985/tcp filtered mapper-mapethd 3999/tcp filtered remoteanything 4000/tcp filtered remoteanything 4045/tcp filtered lockd 4133/tcp filtered nuts_bootp 4144/tcp filtered wincim 4343/tcp filtered unicall 4559/tcp filtered hylafax 4672/tcp filtered rfa 4987/tcp filtered maybeveritas 4998/tcp filtered maybeveritas 5001/tcp filtered commplex-link 5010/tcp filtered telelpathstart 5050/tcp filtered mmcc 5101/tcp filtered admdog 5191/tcp filtered aol-1 5192/tcp filtered aol-2 5193/tcp filtered aol-3 5236/tcp filtered padl2sim 5302/tcp filtered hacl-cfg 5303/tcp filtered hacl-probe 5432/tcp filtered postgres 5510/tcp filtered secureidprop 5530/tcp filtered sdserv 5550/tcp filtered sdadmind 5632/tcp filtered pcanywherestat 5717/tcp filtered prosharenotify 5800/tcp filtered vnc-http 5802/tcp filtered vnc-http-2 5900/tcp filtered vnc 5903/tcp filtered vnc-3 5977/tcp filtered ncd-pref-tcp 5998/tcp filtered ncd-diag 6000/tcp filtered X11 6004/tcp filtered X11:4 6007/tcp filtered X11:7 6008/tcp filtered X11:8 6103/tcp filtered RETS-or-BackupExec 6106/tcp filtered isdninfo 6143/tcp filtered watershed-lm 6148/tcp filtered ricardo-lm 6346/tcp filtered gnutella 7000/tcp filtered afs3-fileserver 7002/tcp filtered afs3-prserver 7007/tcp filtered afs3-bos 7200/tcp filtered fodms 7201/tcp filtered dlip 7326/tcp filtered icb 8009/tcp filtered ajp13 8443/tcp filtered https-alt 8888/tcp filtered sun-answerbook 8892/tcp filtered seosload 9999/tcp filtered abyss 10000/tcp filtered snet-sensor-mgmt 10005/tcp filtered stel 10083/tcp filtered amidxtape 13701/tcp filtered VeritasNetbackup 13702/tcp filtered VeritasNetbackup 13705/tcp filtered VeritasNetbackup 13712/tcp filtered VeritasNetbackup 13714/tcp filtered VeritasNetbackup 13716/tcp filtered VeritasNetbackup 13717/tcp filtered VeritasNetbackup 13718/tcp filtered VeritasNetbackup 13720/tcp filtered VeritasNetbackup 13722/tcp filtered VeritasNetbackup 13782/tcp filtered VeritasNetbackup 13783/tcp filtered VeritasNetbackup 16959/tcp filtered subseven 18000/tcp filtered biimenu 20005/tcp filtered btx 22273/tcp filtered wnn6 22289/tcp filtered wnn6_Cn 22305/tcp filtered wnn6_Kr 26208/tcp filtered wnn6_DS 27665/tcp filtered Trinoo_Master 32772/tcp filtered sometimes-rpc7 32774/tcp filtered sometimes-rpc11 32778/tcp filtered sometimes-rpc19 43188/tcp filtered reachout 44442/tcp filtered coldfusion-auth 54320/tcp filtered bo2k Nmap run completed -- 1 IP address (1 host up) scanned in 60.526 seconds
...ci sono poche porte aperte e molte filtered con il nome del servizio che le usa a fianco: cosa significa che la porta è filtered? E' vulnerabile agli exploit del servizio che vi gira come se fosse
Lo stupido non si accontenta di violare una regola etica: pretende che la sua trasgressione diventi una nuova regola.