Nmap Development mailing list archives
port snipe functionality
From: Toni Ruottu <toni.ruottu () iki fi>
Date: Sat, 29 Jan 2011 15:49:48 +0200
hey, I am still trying to snipe ports outside the current target specification. This is particularly useful for scanning distributed systems that do not have a standard port, but rather provide a discovery service that return (host, port) pairs for the involved nodes. In such cases it is natural to add discovery services as scan targets, and use port scripts to retrieve lists of (host, port) pairs from the service and store them into the registry. Problems arise when one goes on to write follow-up scripts that read the stored (host, port) pairs from the registry in order to scan them. Scanning the nodes would require an nmap.snipe(host, port) function that would allow scanning a port outside the original target specification. When combined with postrule scripts, sniping could be used to scan complex systems consisting of multiple nodes. As far as I've been able to find out such snipe function does not currently exist. Implementing one on the NSE side would require reimplementing big parts of the port scanning functionality on the NSE side. Also it seems to be currently impossible to reports port state and version information outside the original target specification. My impression is. Thus implementing a snipe function on the NSE does not seem feasible. How much effort would it take to implement this on the C side? --Toni _______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- port snipe functionality Toni Ruottu (Jan 29)
- Re: port snipe functionality m k (Jan 30)
- Re: port snipe functionality David Fifield (Feb 03)