0
votes
1answer
26 views

ADSL device providing No NAT DMZ alongside NAT (IPv4)

I have an ADSL modem/router/switch which performs NAT. It does this even for the one host it can be configured to provide a DMZ. I want to be able to perform Nmap scans from a specific host and there ...
1
vote
1answer
505 views

Kali Linux Can't Find Any Computer On Network

I'm trying nmap and arp. When i'm execute "arp -a" only shows myhome.mynet ([my_ip]) at [MAC_ADDRESS] [ether] on wlan0 And when i'm trying to nmap [my_ip] it shows Starting Nmap 6.40 ( ...
0
votes
2answers
111 views

How can I find private IP address of a device?

I 'm trying to detect IP address of a Wireless Access Point device, connected via Ethernet on my router. Router's configuration page shows status of the Ethernet port is up, but no device connected. ...
1
vote
3answers
99 views

Quick way to scan for opened ports on local network according to a list

How can I quickly find out whether port 80 is open/listening on a server via a bash script? Normally on all workstations the daemon is running, but sometimes it fails. I use the following command to ...
0
votes
1answer
88 views

How to get device name from scan like nmap on Linux

I know that I can use a tool like NMAP or arp-scan on Linux to identify the IP and MAC addresses of all devices on my local network. I also know that arp-scan will do a MAC address lookup to get the ...
0
votes
1answer
70 views

Reconciling nmap, fping output

I am trying to understand the local network I am on. Public IP is 23.23.23.23, say. Output of some common commands: charles@ely:~$ ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc ...
2
votes
1answer
59 views

How to list hosts on the current network without knowing the subnet in advance?

The following 2 questions have been useful for finding hosts on a target network: - http://superuser.com/q/311019/45927 - http://security.stackexchange.com/q/36198/35859 However, answers in both ...
0
votes
0answers
23 views

Find OS by interpreting TCP/IP fingerprints when using nmap [duplicate]

When I ran the command: nmap -O ip_address to identify the OS, I got the following result: OS:SCAN(V=5.05BETA1%D=8/23%OT=22%CT=1%CU=42341%PV=N%DS=0%DC=L%G=Y%TM=4A91CB ...
1
vote
1answer
1k views

Setting up the metasploitable in virtualbox

I'm supposed to try and use kali to do exploits on metasploitable, but I'll burn that bridge when I get there. My question right now is: How do I set up a host only network on virtualbox? I heard ...
0
votes
0answers
54 views

Nmap spoofing function

I try to use nmap to spoof the IP address inside my network (LAN) but I'm having no luck. I used nmap --iflist (my actual IP address on the network is: 129.110.11.58) and went for eth0 for the -e ...
1
vote
1answer
2k views

How does nmap calculate the difficulty of TCP sequence prediction?

I am learning how nmap operates by testing it with another workstation in my network. When I entered nmap -v -A -sS 192.xxx.xxx.xxx Part of the output produced the line below. TCP Sequence ...
1
vote
1answer
269 views

Changed port service from http to http-proxy

I have Apache running on 192.168.0.201 and listening to Port 80. namp shows me that Port 80/TCP is open and service is http. [root@desktop ~]# nmap -p 80 -sT 192.168.0.201 Starting Nmap 5.51 ( ...
0
votes
1answer
31 views

Nmap not returning hostnames when connected to 2 networks

I've the following configuration : 1 computeur connected a 1 network over Wifi and another network over ethernet. These 2 network are totally independant. I'm using nmap (6.00) to check which ...
1
vote
1answer
94 views

Penetration testing with WMAP, only for my domain, not the others with the same IP?

My domain got massively hacked, so I'm doing some penetration testing with it using WMAP and NMAP etc. However, I believe it's on shared hosting, so running tests on 182.34.xx.xxx (the IP address for ...
0
votes
0answers
60 views

Network Probes, Identifying network slowdowns?

I have a buddy with an extensive wireless N network, he has 1 Linksys E4200, with several other Linksys E3200's on the same LAN. He also has a Sonos Wireless sound system and often complains of ...
1
vote
2answers
815 views

Nmap showing 113/tcp closed ident for every IP

I'm trying to find a free IP address on a network that doesn't use DHCP. I decided to run an intense scan using Nmap from 10.0.5.0 to 10.0.5.255. (I know this isn't the best way to find an unused IP ...
0
votes
2answers
265 views

How to find filtered ports using nmap

How do i list all the filtered ports using nmap? i have used the command sudo nmap -sS -v how can we print the list of the ports should i use -sU ,-sX or any other parameter
2
votes
2answers
749 views

Port Scan: What is “netvenuechat”?

I was doing a quick port scan at work (Nmap 6, OS X 10.6.8), and I noticed that nearly all of the computers around me were running a service called "netvenuechat" on Port 1023. Although I've searched ...
1
vote
1answer
3k views

What is hosts2-ns

I just did a portscan on my parents router from the outside with nmap. (outside means I ssh'ed to my server and nmap'ed back to the routers external ip from that server) ~ $ sudo nmap -Pn ...
0
votes
2answers
726 views

Use Nmap to send arbitrary data from spoofed address/port

For testing the error and timeout handling of a custom SIP stack, it is sometimes useful to send UDP packets from multiple source addresses (even ones that are assigned to other hosts) to the host ...
5
votes
2answers
445 views

Detect Tor bridge inside my network

How could I detect someone running a Tor bridge inside my local network? I guess I could use a Tor client and try all the IPs to see if they work as a bridge. Is there a faster solution? Maybe using ...
7
votes
4answers
11k views

Find computer names on a private network (with nmap?)

On a LAN, I want to find out the names of all the connected computers using a cross-platform program, preferably nmap. I know I can do nmap -sn xxx.xxx.xxx.xxx/24 (where xxx.xxx.xxx.xxx is a local ...
0
votes
2answers
219 views

different result while nmap scan a subnet

while running: nmap -n -PN -sT -T4 -p 445,139 10.0.40.0/24 i get: Interesting ports on 10.0.40.6: PORT STATE SERVICE 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds if I ...
1
vote
3answers
2k views

Getting a list of IP addresses on Local Subnet and which switch they are on

I would like to get a text file listing which IP addresses are on my local subnet and which ethernet switch they connect to. Ideally the name of the machine would be nice but I can work that out ...
0
votes
1answer
87 views

Identify storage devices in a network

I am scanning a network looking for storage devices with nmap. Any ideas on which I should base my search?
3
votes
3answers
135 views

Transferring NMap scans between machines

Anyone know if its possible to halt a running nmap scan and for another scan on a different machine to 'pick up where it left off'?
2
votes
2answers
747 views

How does NMap decide to print a progress line?

Checking a larger subnet than I normally do; mapping out a cluster suite in a university for a traffic mapping project (permission attained), and I was wondering something. NMap usually prints its ...
2
votes
1answer
708 views

what makes a printer a printer in a network?

I am scanning a network using nmap. I assume that this network has copy machines and printers with IP addresses. Is there a way I can differentiate the regular computers from the printers? nmap can ...