Penetration Testing mailing list archives
Re: Mapping Class A network ( any easy trick?)
From: Jordan Wiens <numatrix () ufl edu>
Date: Tue, 8 Feb 2005 12:54:44 -0500 (EST)
On Tue, 8 Feb 2005, John Thomas wrote:
I am about to do a penetration testing on a ?Class A network? and wondering how I can map the network without pinging 17 million IPs.(nmap -Sp 10.0.0.0/8) I did some research and the best information I got is from one of the earlier post on this list(http://seclists.org/lists/pen-test/2004/Jul/0067.html) . It was to use broadcast IPs for pings. But it may miss some subnets. Is that the best way to it? If not, please advise
Probably not. For very good reasons (smurf attacks, namely), broadcast pings are disabled in most networks. Besides which; you don't necessarily know where the broadcasts are on the network. Guessing isn't much use unless it's a very homogenous network of all convienant class Bs, and figuring out where the broadcasts are (ala the link above) is likely to be more work than just pinging all IPs with something very fast. You'd be surprised at how fast 17 million packets can get sent.
I'd definitely recommend scanrand. It's a part of the Paketto Keiretsu package from Dan Kaminsky, and is much better than nmap for extremely large network probing.
http://www.doxpara.com/read.php/code/paketto.htmlPoke around the site, there's some newer code that wasn't linked to from the main page if memory serves.
-- Jordan Wiens, CISSP UF Network Security Engineer (352)392-2061
Current thread:
- Mapping Class A network ( any easy trick?) John Thomas (Feb 08)
- Re: Mapping Class A network ( any easy trick?) alank (Feb 08)
- Message not available
- Re: Mapping Class A network ( any easy trick?) alank (Feb 09)
- Message not available
- Re: Mapping Class A network ( any easy trick?) alank (Feb 08)
- Re: Mapping Class A network ( any easy trick?) Jordan Wiens (Feb 08)
- Re: Mapping Class A network ( any easy trick?) Ismael Gonzalez (Feb 11)
- <Possible follow-ups>
- RE: Mapping Class A network ( any easy trick?) Moonen, Ralph (Feb 08)
- Re: Mapping Class A network ( any easy trick?) Tim (Feb 09)
- RE: FW: Mapping Class A network ( any easy trick?) Navin Johnson (Feb 08)
- Fw: Re: Mapping Class A network ( any easy trick?) Volker Tanger (Feb 09)
- RE: Mapping Class A network ( any easy trick?) Henderson, Dennis K. (Feb 09)
- RE: Mapping Class A network ( any easy trick?) Brass, Phil (ISS Atlanta) (Feb 09)
- RE: Mapping Class A network ( any easy trick?) Moonen, Ralph (Feb 09)
- Re: Mapping Class A network ( any easy trick?) Tim (Feb 11)
- RE: Mapping Class A network ( any easy trick?) robert (Feb 09)