Re: Different ways to portscan IPS

["J. Oquendo" <sil () infiltrated net>]

Ward, Jon wrote:
> From a microsoft OS command line, you could try something like this:
>  FOR /L %i IN (1,1,254) DO nc.exe 192.168.1.%i >> result.txt
>
> If you need another octet, you can nest for loops something like:
>  FOR /L %n IN (1,1,254) DO FOR /L %i IN (1,1,254) DO nc.exe
> 192.168.%n.%i >> result.txt
>
> Check the help file (FOR /?) for details.
>
> (There is also a "for" command on *nix systems with different syntax.
> Check the man pages.)
>
> Jon Ward, CEPT, CISA
> Vulnerability Testing Technical Lead
> Syntel, Inc.
> Jon_Ward () syntelinc com
>
>  
>   

for i in `seq 1 254`

    do

        nc -s 10.10.10.10 -p 80 -i 60 192.168.1.$i 80

done


Or... Fiddle with the timing on nmap, e.g.:

 nmap -sSVR -O -P0 192.168.1.0/24 --scan_delay 120000 -vvv

etc


-- 

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP

"It takes 20 years to build a reputation and five minutes to
ruin it. If you think about that, you'll do things
differently." - Warren Buffett

227C 5D35 7DCB 0893 95AA  4771 1DCE 1FD1 5CCD 6B5E
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------