Full Disclosure mailing list archives
Re: Nachi Worm
From: "Gabriel L. Somlo" <somlo () acns colostate edu>
Date: Thu, 4 Dec 2003 15:48:09 -0700
Does any one know if you can sacn of the nachi worm or the rpc.dcom = vulnerability with nessus Thanks Dave
I just use nmap to scan for machines listening on tcp port 707. Very few false positives, good scaling: nmap -sS -p707 -oG - AAA.BBB.0.0/16 | grep 'Ports: 707/open/tcp' \ | cut -d' ' -f2 \ | sort -t. -k3,3n -k4,4n \ | mail -s "Nachi suspects" foo () bar com Hope this helps, Gabriel _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Nachi Worm David Loyd (Dec 04)
- <Possible follow-ups>
- RE: Nachi Worm Norman Girard (Dec 04)
- RE: Nachi Worm Discini, Sonny (Dec 04)
- RE: Nachi Worm Norman Girard (Dec 04)
- Re: Nachi Worm Gabriel L. Somlo (Dec 04)
- RE: Re: Nachi Worm Schmehl, Paul L (Dec 04)