TCP/OS Fingerprinting Tools – p0f and nmap | The particular way an operating system or device sends and receives TCP packets provides a unique fingerprint. TCP header information such as the window size, TTL, overall SYN packet size, MSS, MTU and so forth can help identify the OS. This is known as OS fingerprinting. The best known passive TCP fingerprint tool is p0f,
Use nmap to Identify MAC and IP of Machines on LAN
Use nmap to Identify MAC and IP of Machines on LAN | Instead of pinging the broadcast which may or may not work for various reasons, use namp to identify MAC addresses and ips of computers or devices on your LAN. Here is how it works! The nmap option is tack sP along with the ip range desired to scan. If you use a 192.168 range at
Quick nmap How-To
Quick nmap How-To | nmap or network mapper is an open source command line program for security auditing. Here is a basic intro! As always, only scan your own hosts or hosts that you have permission to scan! To do a simple check of open ports or port filtering, issue: $ sudo nmap host stmiller@brahms:~$ sudo nmap scottlinux.com Starting
Disable Debian Banner Suffix on SSH Server
Disable Debian Banner Suffix on SSH Server | While ssh requires broadcasting the exact version number for the protocol of the openssh spec, you can opt to disable broadcasting of the ‘Debian’ suffix that is added by default. By default your server provides something like this to the world: OpenSSH 5.2p1 Debian 7ubuntu3.5 (protocol 2.0) I’ll show you how to change that and
Quick Hping How-To
Quick Hping How-To | hping is an excellent networking tool that can be used to send a crafted packet over a specific port to test firewall settings. In this example, I’ll show you how to do quick firewall port testing using hping3. First, install hping! Ubuntu has the latest hping3: sudo apt-get install hping3 Ok, now let’s send a
Roku Open Ports
Roku Open Ports | Being the hackery-type that I am, I have been poking at my newly purchased Roku HD. It turns out there are four ports open on the Roku. 8080, 8085, 8086, and 8087. After different attempts, the only fun I could come to is that you can telnet to your Roku on port 8080. The other
Nikto Web Server Scanner
Nikto Web Server Scanner | Everyone knows the greatness of nmap, but another useful tool is nikto! Nikto is available in Ubuntu 10.10 multiverse, as well as in the latest Fedora. Install it as usual: sudo apt-get install nikto or yum install nikto Now, update nikto to the latest scanning vulnerabilities by issuing: sudo nikto -update Then, run nikto -h
