Re: Different ways to portscan IPS

[chr1x <chr1x () sectester net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Hi Yiannis,

I looked at your post and I would like to share with you a netcat
usage text which can help you.

http://www.faveve.uni-stuttgart.de/it/tools/nc_usage.txt

Cheers!

chr1x

- ---
[CubilFelino Security Research Lab - http://chr1x.sectester.net ]
"The computer security is an art form. It's the ultimate martial art."



Ward, Jon escribió:
> > From a microsoft OS command line, you could try something like this:
>  FOR /L %i IN (1,1,254) DO nc.exe 192.168.1.%i >> result.txt
>
> If you need another octet, you can nest for loops something like:
>  FOR /L %n IN (1,1,254) DO FOR /L %i IN (1,1,254) DO nc.exe
> 192.168.%n.%i >> result.txt
>
> Check the help file (FOR /?) for details.
>
> (There is also a "for" command on *nix systems with different syntax.
> Check the man pages.)
>
> Jon Ward, CEPT, CISA
> Vulnerability Testing Technical Lead
> Syntel, Inc.
> Jon_Ward () syntelinc com
>
>
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of AK
> Sent: Tuesday, December 01, 2009 1:38 PM
> To: Yiannis Koukouras
> Cc: Vimal(tm); pen-test () securityfocus com
> Subject: Re: Different ways to portscan IPS
>
> Can you please paste the code?
> Cheers!
>
> Yiannis Koukouras wrote:
> > Hi,
> >
> > Scripting netcat to do a connect only scan worked for my team.
> >
> > You can use time delays in your script as well ;)
> >
> > Ioannis (Yiannis) Koukouras
> > CISSP, CISA, CISM
> > MSc in Computer Systems Security
> > BEng in Electronic Engineering
> > http://www.linkedin.com/in/ikoukouras
> > ---
> > The information contained in this communication is intended solely for
>
> > the  use  of the individual or entity to whom it is addressed and
> > others authorized to receive it.  It may  contain confidential or
> > legally privileged information.  If  you  are  not the intended
> > recipient you are hereby notified that  any  disclosure,  copying,
> > distribution  or  taking any action in reliance on the contents of
> > this  information  is  strictly  prohibited  and  may be unlawful.
> >
> > If you have received this communication in error, please notify the
> > sender immediately  by  responding  to this email and then delete  it
> > from your system.
> >
> >
> >
> > On Fri, Nov 20, 2009 at 1:02 PM, Vimal(tm) <avvimalkumar () gmail com>
> wrote:
> >  
> > > What are the different ways of port scanning the target when an IPS
> in placed.
> > > Some of the methods I used are:
> > >
> > > 1. Delay the scan prob (nmap --scan-delay)
> > >
> > > 2. Integrating the scanner with TOR
> > >
> > > Regards
> > > Vimal
> > >
> > > web   : http://www.maestro-sec.com
> > >
> > > ---------------------------------------------------------------------
> > > --- This list is sponsored by: Information Assurance Certification
> > > Review Board
> > >
> > > Prove to peers and potential employers without a doubt that you can
> actually do a proper penetration test. IACRB CPT and CEPT certs require
> a full practical examination in order to become certified.
> > > http://www.iacertification.org
> > > ---------------------------------------------------------------------
> > > ---
> > >
> > >
> > >    
> > ----------------------------------------------------------------------
> > -- This list is sponsored by: Information Assurance Certification
> > Review Board
> >
> > Prove to peers and potential employers without a doubt that you can
> actually do a proper penetration test. IACRB CPT and CEPT certs require
> a full practical examination in order to become certified.
> > http://www.iacertification.org
> > ----------------------------------------------------------------------
> > --
> >
> >
> >  
>
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review
> Board
>
> Prove to peers and potential employers without a doubt that you can
> actually do a proper penetration test. IACRB CPT and CEPT certs require
> a full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified.
> http://www.iacertification.org
> ------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
 
iQEcBAEBAgAGBQJLGbghAAoJEENUkd83ZfT4YFYH/2zV20/Ncxpv1pLsINIwiVQv
q0tE2Mprz3gITMbJuEavUpYSXj2TbnewaA7ueDbaCEIi0aprPOxFujxLwJ0CBCNJ
YMai7Jf4TBVSeBuzq1KZuT4LCk+XU8h4uVOF+nNIfSnVK33Q6ImTck0qhHRZMMOC
OJtPC0o5g4lNiYWaCnRodgxFaCAlrPAUSGPqFIVfj04DtcMc2pVwwqCe/v3goJPd
/b7HsZ5z6jm4jjyJBzmmo+yq/TR6o/GObyNs6vDes6r/sEA1IdSjJRrhsLjxgZWv
244Zq+o8ri6Kfp0j6ZJLGLIrvfCOAb5bNyo4N4wmJtWy1fs7vdelnLyf83qwAzo=
=UA3s
-----END PGP SIGNATURE-----


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------