Re: Comprehensive firewall test using Nmap?

["M.B.Jr." <marcio.barbado () gmail com>]

No CJ,
I guess Alexander means an automatic port alteration during your

nmap -g $srcport -oA blabla-$srcport etc

suggestion.



Regards,



On 8/21/08, Carl-Johan Bostorp <Carl-Johan.Bostorp () hps se> wrote:
> Hi,
>
>  Using simple scripting would be a good way to get things done quickly.  E.g.
>
>  #!/bin/bash
>
>  srcport=$1
>  end=$2
>
>  while [ $srcport -le $end ]; do
>    nmap -g $srcport -oA blabla-$srcport etc
>    $srcport = `expr $srcport + 1`
>  done
>
>  /CJ
>
>  > -----Ursprungligt meddelande-----
>  > Från: listbounce () securityfocus com
>  > [mailto:listbounce () securityfocus com] För Alexander Sandström Krantz A
>  > Skickat: den 21 augusti 2008 09:00
>  > Till: pen-test () securityfocus com
>  > Ämne: Comprehensive firewall test using Nmap?
>
> >
>  > Is it possible to automatically alter the source port when using Nmap
>  > to test a firewall? It would be very nice if it was possible to provide
>  > a port range instead of one single source port, even though I realise
>  > that such as scan would take a long time to execute. Anyone knows of
>  > any patches for Nmap that allows a source port range to be provided?
>  >
>  > If not, do you have any other suggestion on what application to use to
>  > perform a more comprehensive firewall test?
>  >
>  > Thanks,
>  > Alexander
>  >
>  > -----------------------------------------------------------------------
>  > -
>  > This list is sponsored by: Cenzic
>  >
>  > Top 5 Common Mistakes in
>  > Securing Web Applications
>  > Get 45 Min Video and PPT Slides
>  >
>  > www.cenzic.com/landing/securityfocus/hackinar
>  > -----------------------------------------------------------------------
>  > -
>
>
>  ------------------------------------------------------------------------
>  This list is sponsored by: Cenzic
>
>  Top 5 Common Mistakes in
>  Securing Web Applications
>  Get 45 Min Video and PPT Slides
>
>  www.cenzic.com/landing/securityfocus/hackinar
>  ------------------------------------------------------------------------



-- 
Marcio Barbado, Jr.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------