Re: How to tweak tools against targets that block ICMP

[Robert Portvliet <robert.portvliet () gmail com>]

What is the behavior you are seeing? (Does it fail because it can't
ping the host?)

What tool(s) are you using?

I would think most scanners would have an option to skip this step
(like nmap has -PN)

If the tool you are using doesn't have this option,  I would consider
using a tool where you can craft your packets to slip thorugh the
packet filter, like with NMAP, HPING, SCAPY, etc.

Also, take into consideration that although they are blocking ICMP
echo requests, they may not be blocking echo replys, time-stamp
requests, address mask requests, etc.


On Sat, Jul 17, 2010 at 6:23 AM, Jacky Jack <jacksonsmth698 () gmail com> wrote:
> Hi
>
> Some tools/scanners first send ICMP packet before they do their job.
>
> So, for some hosts which block such packets, I have no idea on how to
> use those tools.
>
> How can I tweak it so that I can use it?
>
> I refer to to the closed-source tools/scanners.
>
> Thank you.
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
> and CEPT certs require a full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------



--

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------