Penetration Testing mailing list archives
Re: Strange NMAP 4.0 Behavior
From: willdamn <willdamn () gmail com>
Date: Tue, 21 Feb 2006 15:32:57 +0100
On 2/20/06, Derek Nash <ddnash () gmail com> wrote:
I was just noticing when running an ICMP Echo scan (-PE) in NMAP version 4.00 that it seems to be including a SYN scan on all Service ports (-sS -F) scan as part of this scan type. I have witnessed this on 2 separate installs and systems, I couldn't find documentation that states this is a new default behavior. Has anyone else witnessed this strange behavior? If this is a new default behavior does anyone know if this behavior is defeatable? This seems like a bug to me, but I thought I would post here prior to submitting a bug report. -- Best Regards, Derek Nash
-PE option has nothing connected with port scan (it's used to host discovery). Nmap default behavior is SYN scan, so when you specified some ports with -PE options, without giving a scanning method, nmap was determining ports status using syn scan. If you only want to determine whether host is up or not, just add -sP option which don't go further than determining if host is online. Sorry if i misunderstood you. Cheers willdamn ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- Strange NMAP 4.0 Behavior Derek Nash (Feb 20)
- Re: Strange NMAP 4.0 Behavior Fabien Degouet (Feb 21)
- Re: Strange NMAP 4.0 Behavior willdamn (Feb 21)
- Re: Strange NMAP 4.0 Behavior Bernhard Mitterer (Feb 21)
- <Possible follow-ups>
- Strange NMAP 4.0 Behavior kx (Feb 21)
- RE: Strange NMAP 4.0 Behavior Monroe, Bruce (Feb 21)