Re: Portscanning through HTTP proxy?

[MadHat <madhat () unspecific com>]

On Dec 6, 2004, at 3:58 PM, Mark Lachniet wrote:
> Is there a decent way, similar to the FTP bounce approach, to do
> portscanning through an insecure HTTP proxy using CONNECT verbs?  For
> example, say I find a dual-homed host that has unrestricted proxy, and 
> am
> too lazy to telnet to the proxy and type:
>
> 'CONNECT http://10.1.1.1:25 HTTP/1.1'
>
> and manually iterate it a hundred times.

there is not an easy way right now built into nmap that I know of, but 
it should be easy to make a patch for it.


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org