Penetration Testing mailing list archives

RE: Tools for pen test,


From: "Stephen McNaught" <smcnaugh () comcast net>
Date: Sat, 4 Aug 2007 18:57:03 -0400


A couple other examples:

for I in `seq 1 255`
  do ip="$1.$I"
      echo $ip
      e=`ping -c 1 $ip | grep "64 bytes"`
       if [[ X$e != X ]]
         then
           echo $e >> /tmp/$ip.output
           nslookup $ip >> /tmp/$ip.output
           traceroute $ip >> /tmp/$ip.output
       fi
 done 


while read ip
 do echo $ip
    e=`ping -c 1 $ip | grep "64 bytes"`
       if [[ X$e != X ]]
         then
           echo $e >> /tmp/$ip.output
           nslookup $ip >> /tmp/$ip.output
           traceroute $ip >> /tmp/$ip.output
       fi
 done < /tmp/testis

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of IRM
Sent: Friday, August 03, 2007 11:43 PM
To: pen-test () securityfocus com
Subject: Tools for pen test, 

For the sake of completeness, every time I perform a penetration testing I
need to PING, NSLOOUKUP, TRACERT, etc. The problem is that tools like PING
only can accept single IP Address so every time I do a penetration testing
for multiple IPs, I need to execute the ping command manually and save all
the corresponding evidence. I knew tools like NMAP can perform ping for
multiple IP addresses with single command but I still wanted to use legacy
*Nix tools like ping, nslookup, etc. 

I was wondering has anyone in here had a shell script that can execute tools
like ping, nslookup and pipe it into a file? Or knew a shell script that can
do this kind of job?

To give you an illustration, the shell script that I am looking for should
can perform this kind of job.

Program 192.168.0.1-20 -> will ping (using *nix ping command from host ID
192.168.0.1 - 192.168.0.20 and save all the output into a file

Cheers, 
John 

 

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------




------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: