Re: nmap for Wintendo (NT/Win2K)

[Max Vision <vision () whitehats com>]

On Mon, 21 Feb 2000, Ken Williams wrote:
> I'm sure that quite a few people will cringe when they read the
> subject line of this email, but it's been discussed before, and I've
> finally found a couple of real (and insane) MS programmers [read: not
> me!] who walk on water and keep insisting that they can easily tackle
> this absurd challenge.

http://www.bahnhof.se/~winnt/toolbox/
It now seems to point to http://ntsecurity.nu/toolbox/ which appears to be 
down..  In any case, they had released a portscanner for windows that did
syn/fin/ack/etc type scanning.  Might have been useful as a reference for
some things...

C:\WINNT>C:\phoenix\os-nt\ipeye.exe

ipEye 1.1 - (c) 2000, Arne Vidstrom (arne.vidstrom () ntsecurity nu)
          - http://ntsecurity.nu/toolbox/ipeye/

Error: Too few parameters.

Usage:

  ipEye <target IP> <scantype> -p <port> [optional parameters]
  ipEye <target IP> <scantype> -p <from port> <to port> [optional
parameters]

  <scantype> is one of the following:
     -syn  = SYN scan
     -fin  = FIN scan
     -null = Null scan
     -xmas = Xmas scan

     (note: FIN, Null and Xmas scans don't work against Windows systems.

  [optional parameters] are selected from the following:
     -sip <source IP>  = source IP for the scan
     -sp <source port> = source port for the scan
     -d <delay in ms>  = delay between scanned ports in milliseconds
                         (default set to 750 ms)


If you can get ahold of the author (their mail service appears to be down
at this time) then they might have some war stories...

Max Vision
http://whitehats.com/
http://maxvision.net/