Re: Please Comment: General Host Input Option

[Brandon Enright <bmenrigh () ucsd edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 25 Jan 2009 20:00:30 -0600 or thereabouts Ron
<ron () skullsecurity net> wrote:

> Cory K. Walker wrote:
> > I posted the following message more than a week ago but received no
> > response.  I was hoping someone would comment on the usefulness of
> > a more general method to specify a list of hosts in an external
> > file for decoys, DNS servers, etc..
> >
> > The original post follows:
> > ==========
> >
> > Is there a general mechanism for specifying a list of hosts for
> > other options aside from "-iL targets.txt"?  For example, the
> > options "--dns-servers" and "-D" both accept a list of hosts - but
> > I don't believe that you have the flexibility to specify a list of
> > decoys (such as --dns-serversL dns.txt or -DL decoys.txt).
> >
> > It seems that this could be very useful for a person who has already
> > compiled a list of decoys.  The command-line syntax would be less
> > cluttered.
> >
> > Cory
>
> Didn't Brandon post a reply? I seem to recall seeing one, but I might
> be confused.

Nope, not to this post.  I replied to the idea of using BitTorrent for
generating random hosts/decoys.

> In any case, what advantage would there be to using known decoys
> instead of random ones? I personally don't see any advantage, but I
> could easily be missing something.

I think Cory is going for a way to provide a list of IPs to features
other than targets via a file.  Per his suggestion, just like -iL, we'd
have --dns-serversL and -DL which both take a file as IP input.

I've never really felt a need for either of these features, but then, I
rarely use either anyways.

I'm not sure how generic the file-to-IP-list routine is but assuming it
is semi-generic we could leverage it pretty easily to add these options.

Perhaps a patch is in order.

Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEARECAAYFAkl9Gq0ACgkQqaGPzAsl94J1awCfeF+7o2GArNC4VzI7IER3aUJN
/qUAoKQNbT1pDAxIHgIN8dgKuhxVydPH
=Ew68
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org