Create HTML reports with nmap | nmap can actually create very good html reports. I’ll show you how! Below is a one-liner command that will scan and create an html file for all open ports and services. This example happens to be a scan of my home network with a few VirtualBox VMs started to add to the mix. I use
OS X Firewall Not Stealth
OS X Firewall Not Stealth | By default, the OS X Lion firewall enabled and stealth actually has a few ports open, despite the System Preferences displaying no services running and no ports open. A nessus scan will reveal the following UDP ports open and broadcasting information: 5353 / UDP 123 / UDP 127 / UDP Note: Ignore port 4242 TCP
TCP/OS Fingerprinting Tools – p0f and nmap
TCP/OS Fingerprinting Tools – p0f and nmap | The particular way an operating system or device sends and receives TCP packets provides a unique fingerprint. TCP header information such as the window size, TTL, overall SYN packet size, MSS, MTU and so forth can help identify the OS. This is known as OS fingerprinting. The best known passive TCP fingerprint tool is p0f,
Use nmap to Identify MAC and IP of Machines on LAN
Use nmap to Identify MAC and IP of Machines on LAN | Instead of pinging the broadcast which may or may not work for various reasons, use namp to identify MAC addresses and ips of computers or devices on your LAN. Here is how it works! The nmap option is tack sP along with the ip range desired to scan. If you use a 192.168 range at
Quick nmap How-To
Quick nmap How-To | nmap or network mapper is an open source command line program for security auditing. Here is a basic intro! As always, only scan your own hosts or hosts that you have permission to scan! To do a simple check of open ports or port filtering, issue: $ sudo nmap host stmiller@brahms:~$ sudo nmap scottlinux.com Starting
Tiger Local Security Audit
Tiger Local Security Audit | Tiger is an excellent local Linux (*nix) system security audit tool. sudo apt-get install tiger Then run: sudo tiger Tiger checks various things such as all user accounts on the machine, problematic cron and service entries, complete system file permission check, rootkits, backdoors, (Debian/Ubuntu example: complete md5sum of installed files against Debian Security Advisories), listening
