RE: Different ways to portscan IPS

["Ward, Jon" <Jon_Ward () syntelinc com>]

> From a microsoft OS command line, you could try something like this:
 FOR /L %i IN (1,1,254) DO nc.exe 192.168.1.%i >> result.txt

If you need another octet, you can nest for loops something like:
 FOR /L %n IN (1,1,254) DO FOR /L %i IN (1,1,254) DO nc.exe
192.168.%n.%i >> result.txt

Check the help file (FOR /?) for details.

(There is also a "for" command on *nix systems with different syntax.
Check the man pages.)

Jon Ward, CEPT, CISA
Vulnerability Testing Technical Lead
Syntel, Inc.
Jon_Ward () syntelinc com

 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of AK
Sent: Tuesday, December 01, 2009 1:38 PM
To: Yiannis Koukouras
Cc: Vimal(tm); pen-test () securityfocus com
Subject: Re: Different ways to portscan IPS

Can you please paste the code?
Cheers!

Yiannis Koukouras wrote:
> Hi,
>
> Scripting netcat to do a connect only scan worked for my team.
>
> You can use time delays in your script as well ;)
>
> Ioannis (Yiannis) Koukouras
> CISSP, CISA, CISM
> MSc in Computer Systems Security
> BEng in Electronic Engineering
> http://www.linkedin.com/in/ikoukouras
> ---
> The information contained in this communication is intended solely for

> the  use  of the individual or entity to whom it is addressed and 
> others authorized to receive it.  It may  contain confidential or 
> legally privileged information.  If  you  are  not the intended 
> recipient you are hereby notified that  any  disclosure,  copying, 
> distribution  or  taking any action in reliance on the contents of 
> this  information  is  strictly  prohibited  and  may be unlawful.
>
> If you have received this communication in error, please notify the 
> sender immediately  by  responding  to this email and then delete  it 
> from your system.
>
>
>
> On Fri, Nov 20, 2009 at 1:02 PM, Vimal(tm) <avvimalkumar () gmail com>
wrote:
>   
> > What are the different ways of port scanning the target when an IPS
in placed.
> > Some of the methods I used are:
> >
> > 1. Delay the scan prob (nmap --scan-delay)
> >
> > 2. Integrating the scanner with TOR
> >
> > Regards
> > Vimal
> >
> > web   : http://www.maestro-sec.com
> >
> > ---------------------------------------------------------------------
> > --- This list is sponsored by: Information Assurance Certification 
> > Review Board
> >
> > Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified.
> > http://www.iacertification.org
> > ---------------------------------------------------------------------
> > ---
> >
> >
> >     
>
> ----------------------------------------------------------------------
> -- This list is sponsored by: Information Assurance Certification 
> Review Board
>
> Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified. 
> http://www.iacertification.org
> ----------------------------------------------------------------------
> --
>
>
>   


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review
Board

Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------