jetlib.sec » Tags » nmap

Feeds

133444 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

55 items tagged "nmap"

Related tags: nse [+], nmap port scanner [+], fyodor [+], usa [+], network [+], david fifield [+], scripting [+], hacking [+], vulnerability detection [+], vulnerability assessment [+], open proxies [+], nse experience [+], engine [+], video [+], tomcat [+], service [+], scanning [+], read [+], rdpscan [+], overflow vulnerability [+], jboss [+], internet authors [+], gateway service [+], gateway [+], dictionary attack [+], checker [+], brute [+], black hat [+], altigen [+], Tools [+], vulnerability scanner [+], vulnerability [+], tar bz2 [+], stack overflow [+], security [+], scripting language [+], script file [+], ruby [+], poor passwords [+], pdf [+], overflow [+], output [+], opie [+], ncrack [+], metasploit [+], mastering [+], marc ruef [+], high speed network [+], fifield [+], dynamic delay [+], darknet [+], command line syntax [+], cheatsheet [+], audio [+], BackTrack [+], xml [+], wurm [+], wrapping [+], vulnerable [+], version 6 [+], upgrade [+], und [+], typo [+], txt [+], text [+], subject line [+], standalone application [+], spanish version [+], source [+], slammed [+], sid [+], shell script [+], shell [+], sessionthief [+], session [+], script [+], schwachstelle [+], scan data [+], ruby interface [+], released [+], quick reference [+], proxy squid [+], port scanners [+], payloads [+], parse [+], output options [+], open ssh [+], open source utility [+], not [+], nmap scans [+], network exploration [+], network discovery [+], nbtscan [+], microsoft windows [+], mac text [+], lst [+], ipv [+], intuitive fashion [+], internet [+], integer [+], http [+], howtos [+], host level [+], hijacking [+], exploit [+], download [+], dllhijack [+], cnet [+], cheatsheet esp v [+], cheatsheet eng v [+], apache httpd [+], Tutorials [+], Support [+], Pentesting [+], General [+], tcp [+], reliability features [+], port [+], ip fragments [+], fin [+], fyodor tags [+]

• May 22, 2012
• 3:10

  Nmap 6 Released For Download – Free Network Discovery & Security Auditing Tool

   » ‎ Darknet
  It’s been a while since the last major release of Nmap, the last time we reported on it was when Nmap v5.20 was Released (February 2010). The latest major version has just been released, version 6 – and is now available for download! For the two people on the planet who don’t know – Nmap [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  download nmap released read network-discovery darknet version-6 hacking Tools  

• May 21, 2012
• 21:00

  Nmap Port Scanner 6.00

   » ‎ Packet Storm Security Recent Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• 21:00

  Nmap Port Scanner 6.00

   » ‎ Packet Storm Security Tools
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• 21:00

  Nmap Port Scanner 6.00

   » ‎ Packet Storm Security Misc. Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• March 18, 2012
• 3:33

  rdpScan Network Checker

   » ‎ Packet Storm Security Recent Files
  This is a simple script that leverages nmap to scan for RDP-Server.

  Tags:  rdpscan checker network nmap  

• 3:33

  rdpScan Network Checker

   » ‎ Packet Storm Security Tools
  This is a simple script that leverages nmap to scan for RDP-Server.

  Tags:  rdpscan checker network nmap  

• 3:33

  rdpScan Network Checker

   » ‎ Packet Storm Security Misc. Files
  This is a simple script that leverages nmap to scan for RDP-Server.

  Tags:  rdpscan checker network nmap  

• February 21, 2012
• 4:12

  Nmap Iptables Shell Script

   » ‎ Packet Storm Security Tools
  This is a shell script that launches iptables to add rules that will flag various types of nmap scans.

  Tags:  nmap shell script nmap-scans shell-script  

• February 17, 2012
• 21:51

  [Video] Hacking Nmap

   » ‎ SecDocs
  Authors: Fyodor
  Tags: scanning
  Event: DEFCON 13
  

  Tags:  video nmap hacking fyodor-tags fyodor  

• 21:51

  [Audio] Hacking Nmap

   » ‎ SecDocs
  Authors: Fyodor
  Tags: scanning
  Event: DEFCON 13
  

  Tags:  nmap audio hacking fyodor-tags fyodor  

• December 06, 2011
• 21:22

  Cnet Slammed For Wrapping Nmap With Toolbar

   » ‎ Packet Storm Security Headlines
  Cnet Slammed For Wrapping Nmap With Toolbar

  Tags:  wrapping cnet slammed nmap  

• September 10, 2011
• 0:32

  [Video] Mastering the Nmap Scripting Engine

   » ‎ SecDocs
  Authors: David Fifield Fyodor
  Tags: vulnerability assessment scanning
  Event: Black Hat USA 2010
  Abstract: Most security practitioners can use Nmap for simple port scanning and OS detection, but the Nmap Scripting Engine (NSE) takes scanning to a whole new level. Nmap's high-speed networking engine can now spider web sites for SQL injection vulnerabilities, brute-force crack and query MSRPC services, find open proxies, and more. Nmap includes more than 125 NSE scripts for network discovery, vulnerability detection, exploitation, and authentication cracking. Rather than give a dry overview of NSE, Fyodor and Nmap co-maintainer David Fifield demonstrate practical solutions to common problems. They have scanned millions of hosts with NSE and will discuss vulnerabilities found on enterprise networks and how Nmap can be used to quickly detect those problems on your own systems. Then they demonstrate how easy it is to write custom NSE scripts to meet the needs of your network. Finally they take a quick look at recent Nmap developments and provide a preview of what is soon to come. This presentation does not require any NSE experience, but it wouldn't hurt to read nmap.org/book/nse.html.

  Tags:  nse engine scripting fyodor fyodor-tags nmap david-fifield usa nse-experience vulnerability-detection open-proxies  

• 0:23

  [Audio] Mastering the Nmap Scripting Engine

   » ‎ SecDocs
  Authors: David Fifield Fyodor
  Tags: vulnerability assessment scanning
  Event: Black Hat USA 2010
  Abstract: Most security practitioners can use Nmap for simple port scanning and OS detection, but the Nmap Scripting Engine (NSE) takes scanning to a whole new level. Nmap's high-speed networking engine can now spider web sites for SQL injection vulnerabilities, brute-force crack and query MSRPC services, find open proxies, and more. Nmap includes more than 125 NSE scripts for network discovery, vulnerability detection, exploitation, and authentication cracking. Rather than give a dry overview of NSE, Fyodor and Nmap co-maintainer David Fifield demonstrate practical solutions to common problems. They have scanned millions of hosts with NSE and will discuss vulnerabilities found on enterprise networks and how Nmap can be used to quickly detect those problems on your own systems. Then they demonstrate how easy it is to write custom NSE scripts to meet the needs of your network. Finally they take a quick look at recent Nmap developments and provide a preview of what is soon to come. This presentation does not require any NSE experience, but it wouldn't hurt to read nmap.org/book/nse.html.

  Tags:  nse engine scripting fyodor fyodor-tags nmap david-fifield usa nse-experience vulnerability-detection open-proxies  

• 0:22

  [Paper] Mastering the Nmap Scripting Engine

   » ‎ SecDocs
  Authors: David Fifield Fyodor
  Tags: vulnerability assessment scanning
  Event: Black Hat USA 2010
  Abstract: Most security practitioners can use Nmap for simple port scanning and OS detection, but the Nmap Scripting Engine (NSE) takes scanning to a whole new level. Nmap's high-speed networking engine can now spider web sites for SQL injection vulnerabilities, brute-force crack and query MSRPC services, find open proxies, and more. Nmap includes more than 125 NSE scripts for network discovery, vulnerability detection, exploitation, and authentication cracking. Rather than give a dry overview of NSE, Fyodor and Nmap co-maintainer David Fifield demonstrate practical solutions to common problems. They have scanned millions of hosts with NSE and will discuss vulnerabilities found on enterprise networks and how Nmap can be used to quickly detect those problems on your own systems. Then they demonstrate how easy it is to write custom NSE scripts to meet the needs of your network. Finally they take a quick look at recent Nmap developments and provide a preview of what is soon to come. This presentation does not require any NSE experience, but it wouldn't hurt to read nmap.org/book/nse.html.

  Tags:  nse engine scripting fyodor fyodor-tags nmap david-fifield usa nse-experience vulnerability-detection open-proxies  

• 0:21

  [Slides] Mastering the Nmap Scripting Engine

   » ‎ SecDocs
  Authors: David Fifield Fyodor
  Tags: vulnerability assessment scanning
  Event: Black Hat USA 2010
  Abstract: Most security practitioners can use Nmap for simple port scanning and OS detection, but the Nmap Scripting Engine (NSE) takes scanning to a whole new level. Nmap's high-speed networking engine can now spider web sites for SQL injection vulnerabilities, brute-force crack and query MSRPC services, find open proxies, and more. Nmap includes more than 125 NSE scripts for network discovery, vulnerability detection, exploitation, and authentication cracking. Rather than give a dry overview of NSE, Fyodor and Nmap co-maintainer David Fifield demonstrate practical solutions to common problems. They have scanned millions of hosts with NSE and will discuss vulnerabilities found on enterprise networks and how Nmap can be used to quickly detect those problems on your own systems. Then they demonstrate how easy it is to write custom NSE scripts to meet the needs of your network. Finally they take a quick look at recent Nmap developments and provide a preview of what is soon to come. This presentation does not require any NSE experience, but it wouldn't hurt to read nmap.org/book/nse.html.

  Tags:  nse engine scripting fyodor fyodor-tags nmap david-fifield usa nse-experience vulnerability-detection open-proxies  

• August 31, 2011
• 5:43

  [Video] Nmap NSE Hacking for IT Security Professionals

   » ‎ SecDocs
  Authors: Marc Ruef
  Tags: vulnerability assessment scanning
  Event: Hashdays 2010
  Abstract: Nmap is without doubt one of the most important tools in security testing. Initially developed as portscanner, the introduction of NSE (Nmap Scripting Language) enhanced the software heavily. NSE scripts allow to create additional tests, which may provide the functionality of a vulnerability scanner. Basic data collected by nmap and additional network requests can be used to determine software products and security flaws. The talk is discussing the possibilities of NSE scripting, the improvement of professional scanning (with a customer-based example) and current development in the field of NSE programming (my httprecon-nse port and vulscan module). Administrators and auditors will see the their benefits of automated testing.

  Tags:  nse nmap security marc-ruef vulnerability-scanner vulnerability-assessment scripting-language  

• 5:43

  [Slides] Nmap NSE Hacking for IT Security Professionals

   » ‎ SecDocs
  Authors: Marc Ruef
  Tags: vulnerability assessment scanning
  Event: Hashdays 2010
  Abstract: Nmap is without doubt one of the most important tools in security testing. Initially developed as portscanner, the introduction of NSE (Nmap Scripting Language) enhanced the software heavily. NSE scripts allow to create additional tests, which may provide the functionality of a vulnerability scanner. Basic data collected by nmap and additional network requests can be used to determine software products and security flaws. The talk is discussing the possibilities of NSE scripting, the improvement of professional scanning (with a customer-based example) and current development in the field of NSE programming (my httprecon-nse port and vulscan module). Administrators and auditors will see the their benefits of automated testing.

  Tags:  nse nmap security marc-ruef vulnerability-scanner vulnerability-assessment scripting-language  

• July 01, 2011
• 6:25

  Nmap Port Scanner 5.59BETA1

   » ‎ Packet Storm Security Recent Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• 6:25

  Nmap Port Scanner 5.59BETA1

   » ‎ Packet Storm Security Tools
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• 6:25

  Nmap Port Scanner 5.59BETA1

   » ‎ Packet Storm Security Misc. Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• February 25, 2011
• 11:29

  Altigen Gateway Service Heap Overflow

   » ‎ Packet Storm Security Advisories
  Altigen's Gateway Service suffers from a heap overflow vulnerability that can be triggered by a simple nmap portscan.

  Tags:  altigen gateway service overflow-vulnerability gateway-service nmap  

• 11:29

  Altigen Gateway Service Heap Overflow

   » ‎ Packet Storm Security Recent Files
  Altigen's Gateway Service suffers from a heap overflow vulnerability that can be triggered by a simple nmap portscan.

  Tags:  altigen gateway service overflow-vulnerability gateway-service nmap  

• 11:29

  Altigen Gateway Service Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  Altigen's Gateway Service suffers from a heap overflow vulnerability that can be triggered by a simple nmap portscan.

  Tags:  altigen gateway service overflow-vulnerability gateway-service nmap  

• February 07, 2011
• 21:25

  [Video] Mastering the Nmap Scripting Engine

   » ‎ SecDocs
  Authors: David Fifield Fyodor
  Tags: vulnerability assessment scanning
  Event: DEFCON 18
  

  Tags:  video nmap mastering fyodor-tags david-fifield vulnerability-assessment fifield  

• 21:25

  [Slides] Mastering the Nmap Scripting Engine

   » ‎ SecDocs
  Authors: David Fifield Fyodor
  Tags: vulnerability assessment scanning
  Event: DEFCON 18
  

  Tags:  nmap scripting mastering fyodor-tags david-fifield vulnerability-assessment fifield  

• January 29, 2011
• 11:53

  Nmap Port Scanner 5.50

   » ‎ Packet Storm Security Recent Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• 11:53

  Nmap Port Scanner 5.50

   » ‎ Packet Storm Security Tools
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• 11:53

  Nmap Port Scanner 5.50

   » ‎ Packet Storm Security Misc. Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin nmap-port-scanner ip-fragments reliability-features  

• January 10, 2011
• 23:01

  Tomcat/JBoss Nmap Script Brute Forcing Tool

   » ‎ Packet Storm Security Recent Files
  Tomcat/JBoss .nse script for nmap that also includes a short dictionary attack for Tomcat's /manager/html basic-auth.

  Tags:  nmap jboss tomcat dictionary-attack brute  

• 23:01

  Tomcat/JBoss Nmap Script Brute Forcing Tool

   » ‎ Packet Storm Security Tools
  Tomcat/JBoss .nse script for nmap that also includes a short dictionary attack for Tomcat's /manager/html basic-auth.

  Tags:  nmap jboss tomcat dictionary-attack brute  

• 23:01

  Tomcat/JBoss Nmap Script Brute Forcing Tool

   » ‎ Packet Storm Security Misc. Files
  Tomcat/JBoss .nse script for nmap that also includes a short dictionary attack for Tomcat's /manager/html basic-auth.

  Tags:  nmap jboss tomcat dictionary-attack brute  

• September 14, 2010
• 3:17

  sessionthief – HTTP Session Cloning & Cookie Stealing Tool

   » ‎ Darknet
  sessionthief performs HTTP session cloning by cookie stealing. It can issue basic nmap and nbtscan commands to see which IPs are on the subnet, or just listen for IPs broadcasting packets. It can quickly perform ARP poison routing to get packets given the IP of the client if not on an open network or hub, [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  session http sessionthief read nbtscan darknet nmap hacking Tools  

• September 09, 2010
• 19:41

  Metasploit db_nmap output issue

   » ‎ remote-exploit & backtrack
  Hi everyone, I feel like a bit of a goose regarding this issue but after searching and searching I still can't find my answer so I was hoping someone could shed some light on this for me.
  
  The problem I am having is that when I try to output an nmap scan using metasploit for example:
  
  msf> db_nmap -v -sV 192.168.238.100 -oA /home/output
  
  I only get the grepable output and not the other major outputs, if I specify that I want xml output it wont produce any output at all.
  
  However if I am using nmap as a standalone application all the output options and formats work as they should.
  
  I'm running Backtrack 4 R1, with Metaspolit 3.4.2-dev and nmap 5.35DC1.

  Tags:  nmap output metasploit standalone-application output-options BackTrack BackTrack General Support  

• 8:00

  Bugtraq: Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability.

   » ‎ SecurityFocus Vulnerabilities
  Re: Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability.

  Tags:  vulnerable nmap not vulnerability  

• September 07, 2010
• 22:00

  nmap521-dllhijack.txt

   » ‎ Packet Storm Security Advisories
  Nmap version 5.21 on Microsoft Windows suffers from a DLL hijacking vulnerability.

  Tags:  txt nmap dllhijack hijacking microsoft-windows vulnerability  

• August 07, 2010
• 6:33

  [Audio] Nmap: Scanning the Internet

   » ‎ SecDocs
  Authors: Fyodor
  Tags: scanning
  Event: Black Hat USA 2008
  

  Tags:  nmap audio scanning fyodor-tags usa internet-authors black-hat  

• 6:33

  [Slides] Nmap: Scanning the Internet

   » ‎ SecDocs
  Authors: Fyodor
  Tags: scanning
  Event: Black Hat USA 2008
  

  Tags:  internet nmap scanning fyodor-tags usa internet-authors black-hat fyodor  

• 6:33

  [Video] Nmap: Scanning the Internet

   » ‎ SecDocs
  Authors: Fyodor
  Tags: scanning
  Event: Black Hat USA 2008
  

  Tags:  video nmap scanning fyodor-tags usa internet-authors black-hat fyodor  

• August 02, 2010
• 7:35

  Scanning IPv6 Enabled Hosts

   » ‎ Carnal0wnage
  Nmap will scan IPv6 enabled hosts if you pass it the -6 switch, but only does TCP Connect scans and no OS identification, which makes sense because OS identification uses nuances of ipv4 responses...
  
  carnal0wnage ~: nmap -6 -sV 2002:53e9:a52a::832:3316:5042 -p53,80,222
  
  Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-19 20:42 UTC
  Nmap scan report for 2002:53e9:a52a::832:3316:5042
  Host is up (0.17s latency).
  PORT STATE SERVICE VERSION
  53/tcp open domain ISC BIND 9.X
  80/tcp open http nginx
  222/tcp open ssh OpenSSH 5.1p1 Debian 5 (protocol 2.0)
  Service Info: OS: Linux
  
  Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
  Nmap done: 1 IP address (1 host up) scanned in 6.92 seconds
  
  
  carnal0wnage ~: nmap -6 -sV ::ffff:66.148.86.4
  
  Starting Nmap 5.21 ( http://nmap.org ) at 2010-03-19 21:00 UTC
  Nmap scan report for ::ffff:66.148.86.4
  Host is up (0.024s latency).
  Not shown: 795 closed ports, 203 filtered ports
  PORT STATE SERVICE VERSION
  80/tcp open http Apache httpd 1.3.41 ((Unix) PHP/5.2.9)
  8080/tcp open http-proxy Squid webproxy 2.6.STABLE16
  
  Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
  Nmap done: 1 IP address (1 host up) scanned in 11.41 seconds
  
  
  and metasploit supports ipv6
  
  msf auxiliary(http_version) > run
  
  [*] 2002:53e9:a52a:0000:0000:0832:3316:5042 is running nginx
  [*] Scanned 1 of 1 hosts (100% complete)
  [*] Auxiliary module execution completed

  Tags:  tcp nmap ipv open-ssh proxy-squid apache-httpd  

• July 21, 2010
• 17:55

  nmap-5.35DC1.tar.bz2

   » ‎ Packet Storm Security Tools
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin ip-fragments tar-bz2 reliability-features  

• 17:54

  nmap-5.35DC1.tar.bz2

   » ‎ Packet Storm Security Recent Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin ip-fragments tar-bz2 reliability-features  

• June 02, 2010
• 22:01

  ruby-nmap-parser-0.3.5.tgz

   » ‎ Packet Storm Security Misc. Files
  This library provides a Ruby interface to Nmap's scan data. It can run Nmap and parse its XML output directly from the scan, parse a file containing the XML data from a separate scan, parse a String of XML data from a scan, or parse XML data from an object via its read() method. This information is presented in an easy-to-use and intuitive fashion for storing and manipulating.

  Tags:  nmap parse xml ruby ruby-interface intuitive-fashion scan-data  

• May 28, 2010
• 13:02

  ftp-libopie.nse

   » ‎ Packet Storm Security Misc. Files
  OPIE off-by-one stack overflow nmap .nse script file.

  Tags:  nmap nse overflow opie stack-overflow script-file  

• 13:01

  ftp-libopie.nse

   » ‎ Packet Storm Security Recent Files
  OPIE off-by-one stack overflow nmap .nse script file.

  Tags:  nmap nse overflow opie stack-overflow script-file  

• February 23, 2010
• 0:00

  Nmap-Cheatsheet-esp-v1.pdf

   » ‎ Packet Storm Security Misc. Files
  This is a quick reference Nmap cheatsheet. Spanish version.

  Tags:  nmap pdf cheatsheet-esp-v cheatsheet spanish-version  

• 0:00

  Nmap-Cheatsheet-eng-v1.pdf

   » ‎ Packet Storm Security Misc. Files
  This is a quick reference Nmap cheatsheet. English version.

  Tags:  nmap cheatsheet-eng-v pdf cheatsheet quick-reference  

• February 02, 2010
• 0:17

  Nmap v5.20 Released – Open Source Network Exploration & Auditing Tool

   » ‎ Darknet
  Nmap is of course of the most famous port scanners and hacking tools of all time, the last stable release was back in July 2009. For those that may not know, Nmap (“Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  nmap network source read open-source-utility port-scanners network-exploration hacking Tools  

• January 23, 2010
• 10:34

  Metasploit - fixing the framework

   » ‎ remote-exploit & backtrack
  Die praktische Anwendung des Metasploit Exploiting Frameworks bietet enorme Möglichkeiten zur Vereinfachung eines Pentests. Dazu gehört unter anderem der automatisierte Exploitingvorgang durch die Einbindung weiterer Tools, wie auch die Verwendung von Multistage Payloads oder der automatisierte Sammelvorgang von Informationen nach einem erfolgreichen Exploitingvorgang.
  
  All diese Automatismen helfen allerdings nicht weiter, wenn bereits die Anwendung eines Exploits scheitert. Dies ist beispielsweise der Fall, wenn das Zielsystem zwar die Schwachstelle aufweist, Metasploit dieses System nicht vollständig unterstützt. Bevor wir uns im dritten Artikel, in der nächsten Ausgabe, mit dem automatisierten Exploitingvorgang mehrerer Systeme beschäftigen, passen wir in diesem Artikel einen vorhandenen Exploit an eine vorgegebene Zielumgebung an.
  
  MS08-067
  
  Dieser Artikel beschäftigt sich mit einer Schwachstelle, die in dem Microsoft Bulletin MS08-067 beschrieben wird. Über diese Schwachstelle soll es, laut diesem Bulletin, möglich sein Remotezugriff auf ein Windowssystem zu erlangen. Wie in Abbildung 1 dargestellt, wird dieses Sicherheitsproblem von Microsoft als kritisch eingestuft. Diese Schwachstelle lässt sich über das Netzwerk ausnützen und es ist nahezu jedes Windows Betriebssystem davon betroffen. Ende des Jahres 2008/ Anfang 2009 rückte die dargestellte Schwachstelle durch den Conficker Wurm in regelmäßigen Abständen in die Medien. Vor allem durch das scheinbar nachlässige Patchverhalten vieler Systembetreuer konnte sich Conficker bis in das Jahr 2009 in hohem Maße verbreiten. An dieser Stelle muss auf die hohe Relevanz eines einwandfrei funktionierenden und zeitnahen Patchmanagement hingewiesen werden. Probleme, wie sie von dieser Schwachstelle ausgehen bzw. durch den Conficker Wurm ausgelöst wurden, entstehen im Normalfall nicht, wenn in einem Unternehmen sauber definierte Prozesse zur System- und Softwareaktualisierung vorhanden sind und diese auch korrekt umgesetzt werden.
  
  
  
  Auf Grund dieser sehr interessanten aber nicht besonders ruhmreichen Vergangenheit, des hohen Verbreitungsgrades und der enormen Gefahr, die von dieser Schwachstelle ausgeht, stellt diese ein sehr gutes Beispiel dar, um verfügbare Exploits praktisch anzuwenden und diese auch an das Zielsystem anzupassen. Im Folgenden wird dies anhand des in Abbildung 2 dargestellten Windows 2003 Serversystems mit Service Pack 2 und deutscher Sprachversion demonstriert.
  
  Als Metasploit Version kommt die in Listing 1 dargestellte Version 3.3-dev auf einem Backtrack 4-prefinal Linuxsystem zum Einsatz. Da sich der benötigte Exploit bereits seit einiger Zeit im Framework befindet, sollten auch die meisten früheren Versionen aus dem Jahr 2009 funktionieren. Prüfen lässt sich das sehr einfach mit dem, in Listing 2 dargestellten Befehl „msfcli | grep ms08_067“.
  
  Quote:

  Listing 1: eingesetzte Metasploit Version =[ msf v3.3-dev + -- --=[ 381 exploits - 231 payloads + -- --=[ 20 encoders - 7 nops =[ 156 aux msf > version Framework: 3.3-dev.6055 Console : 3.3-dev.6706

  Einer der ersten Schritte eines typischen Pentests ist die Erkennung des Zielsystems inklusive aller verfügbaren Dienste. Hierfür kann beispielsweise Nmap mit seiner System- und Diensterkennung verwendet werden. Für solche Aufgaben sind die Nmap Optionen „–A“ oder „–sV“ und „–O“ üblicherweise sehr hilfreich. Seit Version 5.0 verfügt Nmap über die Nmap Scripting Engine (NSE) und beinhaltet ein Script für die Erkennung der in diesem Artikel behandelten Schwachstelle. Ein Scanvorgang, der Nmap veranlasst einen ganzen Netzwerkbereich auf die Schwachstelle zu testen, lässt sich beispielsweise mit folgendem CLI Aufruf erstellen:
  
  Code: nmap -p445 -PN -sS -oA windows.445 --script=smb-check-vulns.nse 192.168.1.0/24 Die System und Diensterkennung liefert die benötigten Details über das eingesetzte Betriebssystem und die offenen Ports mit Versionsdetails, sowie auch eine erste Einschätzung ob das geprüfte System die Schwachstelle (MS08-067) aufweist. Für weitere Informationen bezüglich Nmap und NSE sei auf die Links in den Internetressourcen am Ende des Artikels verwiesen.
  
  Der Einsatz des Metasploit Exploiting Frameworks beginnt mit der Suche nach einem passenden Exploit, für die per Nmap ermittelte Schwachstelle. Im Rahmen dieses Artikels wird hierfür die „msfcli“ verwendet. Um den passenden Exploit zu finden, bietet sich die Verwendung des Linuxtools grep an. Eine beispielhafte Ausgabe des Suchvorganges ist in Listing 2 dargestellt.
  
  Code: Listing 2: Exploit Auswahl

m1k3@s3cur1ty:/pentest/exploits/framework3$ ./msfcli | grep ms08 | grep 067[*] Please wait while we load the module tree...
exploit/windows/smb/ms08_067_netapi Microsoft Server Service Relative Path Stack Corruption Kommt die msfconsole zum Einsatz, lässt sich der Exploit mit folgendem Aufruf ermitteln:
  
  Code: search exploits ms08_067 Da die von diesem Exploit benötigten Speicheradressen je nach eingesetztem Service Pack unterschiedlich sind und sich zusätzlich noch zwischen den einzelnen Sprachversionen unterscheiden, muss dieser Exploit für die Zielsystemversion optimiert sein. Metasploit bringt bereits eine hohe Anzahl solcher definierter „Targets“ mit und ermöglicht meist eine einfache Anwendung der Exploits. In Listing 3 ist ein Ausschnitt der möglichen Windows Zielsysteme des gewählten Exploits mit dem vollständigen CLI Aufruf dargestellt. An dieser Ausgabe ist erkennbar, dass Windows 2003-SP2 mit deutschem Sprachpaket offensichtlich nicht unterstützt wird und der Exploit dadurch in der vorhandenen Ausführung nicht für das Zielsystem einsetzbar ist.
  
  Code: Listing 3: ms08_067_netapi Targets (Auszug)

m1k3@s3cur1ty:/pentest/exploits/framework3$ ./msfcli exploit/windows/smb/ms08_067_netapi T[*] Please wait while we load the module tree...

Id Name
-- ----
0 Automatic Targeting
5 Windows 2003 SP0 Universal
6 Windows 2003 SP1 English (NO NX)
7 Windows 2003 SP1 English (NX)
8 Windows 2003 SP2 English (NO NX)
9 Windows 2003 SP2 English (NX) Um den Exploit trotz der fehlenden Sprachunterstützung für das vorhandene Zielsystem einsetzen zu können, muss im ersten Schritt der Sourcecode des Exploits analysiert werden. Das zuständige Ruby File ist unterhalb des Framework Root-Ordners „/pentest/exploits/framework3“ zu finden. Die Namensgebung des Exploits ist identisch mit dem Source File und verwendet als Dateiendung ein „rb„ für Ruby. Unter dem „modules“ Ordner findet man alle von Metasploit angebotenen Exploits, Payloads und Auxiliary-Module, wie auch die vorhandenen Encoder. An dieser Stelle sei jedem eine kurze Reise durch die Metasploit Ordner Hierarchie nahe gelegt.
  
  Code: m1k3@s3cur1ty:/pentest/exploits/framework3$ sudo vim modules/exploits/windows/smb/ms08_067_netapi.rb Der allgemeine Aufbau dieser Source-Files wird in diesem Artikel nicht weiter beschrieben. In den meisten Fällen ist die Struktur dieser Files weitestgehend selbsterklärend. Nach kurzem Einlesen ist der Aufbau verständlich und man findet die relevanten Bereiche des Exploits ohne größere Probleme. In unserem Fall erkennen wir an der Definition der Targets, dass unterschiedliche Zielsysteme verschiedene Adressen in der Ret-Variable besitzen. Des Weiteren lässt sich aus den Kommentaren erkennen, dass es sich bei diesen Adressen um die Speicheradressen einer „JMP ESI“ Funktion handelt. Nach dieser Analyse des Sourcecodes ist somit bekannt, dass eine JMP-ESI Adresse eines deutschen Windows 2003 Servers mit SP2 benötigt wird.
  
  Als Basis für diesen Artikel wird ein Windows 2003 Server ohne Execution Protection (NX) betrachtet. Weitere Informationen zu Execution Protection (NX) finden Sie in den Internet Ressourcen am Ende des Artikels.
  
  Analyse im Debugger
  
  Der folgende Abschnitt betrachtet die Analyse eines Windows 2003 Server Systems mit dem Ziel, durch den vorhandenen Metasploit Exploit „ms08_067_netapi“ einen privilegierten Systemzugriff zu erlangen. Es wird die im Source File erkannte „JMP ESI“ Funktion gesucht und beschrieben wie man diese Information zu einem funktionierenden Exploit umsetzt.
  
  Im Normalfall eines Angriffs bzw. eines Pentests müsste man das Zielsystem nachbauen und mit Hilfe eines Debuggers auf dem Testsystem die Adresse einer „JMP ESI“ Funktion ermitteln. Der Einfachheit halber wird in diesem Artikel direkt das Zielsystem für diese Analyse verwendet.
  Zum Debuggen bietet sich das frei erhältliche Tool Oldybg an, welches keine Installation benötigt.
  Nach dem Start des Debuggers hängen wir, wie in Abbildung 3 dargestellt ist, mit File-Open den Internet Explorer an den Debugger an. Hierfür kann nahezu jeder beliebige Prozess verwendet werden. Der angehängte Prozess läuft dadurch im Debugger ab, wodurch sich dessen Funktionsweise detailliert analysieren lässt.
  
  read more: Metasploit - fixing the framework | www.s3cur1ty.de

  Tags:  schwachstelle nmap exploit payloads lst wurm Tutorials und howtos  

• January 22, 2010
• 17:00

  ncrack-0.01ALPHA.tar.gz

   » ‎ Packet Storm Security Tools
  Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed using a modular approach, a command-line syntax similar to Nmap and a dynamic engine that can adapt its behaviour based on network feedback. It allows for rapid, yet reliable large-scale auditing of multiple hosts. Ncrack's features include a very flexible interface granting the user full control of network operations, allowing for very sophisticated bruteforcing attacks, timing templates for ease of use, runtime interaction similar to Nmap's and many more.

  Tags:  network ncrack nmap high-speed-network poor-passwords command-line-syntax  

• 17:00

  ncrack-0.01ALPHA.tar.gz

   » ‎ Packet Storm Security Recent Files
  Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed using a modular approach, a command-line syntax similar to Nmap and a dynamic engine that can adapt its behaviour based on network feedback. It allows for rapid, yet reliable large-scale auditing of multiple hosts. Ncrack's features include a very flexible interface granting the user full control of network operations, allowing for very sophisticated bruteforcing attacks, timing templates for ease of use, runtime interaction similar to Nmap's and many more.

  Tags:  network ncrack nmap high-speed-network poor-passwords command-line-syntax  

• 9:56

  NMAp NSE Question

   » ‎ remote-exploit & backtrack
  First let me say, yes I know this isn't a nmap support forum and that if nobody here knows the answer to my question I will go ask on a nmap mailing list or something.
  
  To the point. I'm wondering if anyone knows the scope of NMAP NSE scripts? Are they always associated with a port or are there host level NSEs as well. Think of this from the perspective of parsing NMAP XML output.
  
  Personally I've only seen NSE output related to a port but that doesn't meant that there isn't a host level NSE output that I just haven't managed to trigger yet.
  
  Edit: Yes I know I typo'd the subject line :(

  Tags:  nse nmap output host-level typo subject-line Pentesting  

• 6:45

  Ruby, Nmap XML, and Databases

   » ‎ Carnal0wnage
  So I had a requirement to take some output from nmap scans, shove it into a database and then be able to run some queries on that data.
  
  Wait, isn't there something that already does that?!
  
  Actually PBNJ and nmap_xml2sql.pl will do this but uses (eeeek!) perl to do it. I wanted to do it in Ruby.
  
  Your options for Ruby & Nmap parsing are:
  
  -rubynmap http://rubynmap.sourceforge.net/
  -ruby-nmap http://ruby-nmap.rubyforge.org/
  -metasploit has its own nmap xml parser
  -writing your own
  
  I started with rubynmap for my parsing gem.
  (Note: use the svn version. the version # hasn't changed but the svn version works alot better)
  
  I stole the schema from nmap_xml2sql and added a few things and a scripts table for nmap scripts output and tried shoving that into a sqlite3 database.
  

  TABLE nmap (
                 sid INTEGER PRIMARY KEY AUTOINCREMENT,
                 version TEXT,
                 xmlversion TEXT,
                 args TEXT,
                 types TEXT,
                 starttime INTEGER,
                 startstr TEXT,
                 endtime INTEGER,
                 endstr TEXT,
                 numservices INTEGER)
  
  TABLE hosts (
                 sid INTEGER,
                 hid INTEGER PRIMARY KEY AUTOINCREMENT,
                 ip4 TEXT,
                 ip4num INTEGER,
                 hostname TEXT,
                 status TEXT,
                 tcpcount INTEGER,
                 udpcount INTEGER,
                 mac TEXT,
                 vendor TEXT,
                 ip6 TEXT,
                 distance INTEGER,
                 uptime TEXT,
                 upstr TEXT)
  

  ----SNIP----

  This "works" but sqlite3 doesn't seem to actually support foreign keys. So while I was correctly assigning a SID value in nmap that value wasn't linking up in hosts and the HID value in subsequent tables. If I'm wrong here please let me know if this works for you as written. For me in populates with nulls and I don't see how its linking back to the tables.
  

  cg@ihatesql:~$ sqlite3 nmap
  SQLite version 3.6.21
  sqlite> .dump nmap
  CREATE TABLE nmap (
                  sid INTEGER PRIMARY KEY AUTOINCREMENT,
                  nmapversion TEXT,
                  xmlversion TEXT,
                  args TEXT,
                  types TEXT,
                  starttime INTEGER,
                  startstr TEXT,
                  endtime INTEGER,
                  endstr TEXT,
                  numservices INTEGER);
  INSERT INTO "nmap" VALUES(1,'4.90RC1','1.03','nmap -A -oX test.xml 209.20.85.250','connect',1262181807,'Wed Dec 30 09:03:27 2009',1262181814,'Wed Dec 30 09:03:34 2009',1000);
  COMMIT;
  
  sqlite> .dump hosts
  CREATE TABLE hosts (
                  sid INTEGER ,
                  hid INTEGER PRIMARY KEY AUTOINCREMENT,
                  ip4num INTEGER,  
                  hostname TEXT,
                  status TEXT,           
                  mac TEXT,
                  vendor TEXT,
                  ip6 TEXT,   
                  distance INTEGER,
                  uptime TEXT,
                  starttime INTEGER,
                  endtime INTEGER,
          );
  INSERT INTO "hosts" VALUES(NULL,1,'209.20.85.250','209-20-85-250.slicehost.net','up','','','','','',1262181807,1262181814);
  COMMIT;
  

  so we can see that the SID and HID are correctly auto incrementing but the SID didn't make it into the hosts table
  
  **Actually sqlite3 as of 3.6.19 supports foreign keys...by adding a
  FOREIGN KEY(sid) REFERENCES nmap(sid) to the hosts table and so on. And by declaring PRAGMA foreign_keys = ON.
  
  BUT I still couldn't get it to work.
  
  doing a db.execute("PRAGMA foreign_keys = ON") wasn't working for me. I received no errors but doing a dump on the table would list the foreign key support as OFF :-( maybe its a gem issue?
  
  So to cheat I added ip4num, ip6, hostname to tables i knew I'd be querying a lot like ports and scripts.
  

  
        CREATE TABLE ports (
                    hid INTEGER,
                    ip4num INTEGER,
                    ip6 TEXT,
                    port INTEGER,
                    state TEXT,
                    reason TEXT,
                    name TEXT,
                    tunnel TEXT,
                    product TEXT,
                    version TEXT,
                    extra TEXT,
                    confidence INTEGER,
                    method TEXT,
                    proto TEXT,
                    owner TEXT,   
                    rpcnum TEXT,
                    fingerprint TEXT,
            FOREIGN KEY(hid) REFERENCES hosts(hid)
            )
  

  
  That way, querying for open ports or specific versions of a service were possible and I could still get an IP associated with that. A bit harder to pull all that information together but still there and a select * from ports; or select ip4num from ports where port = 1521; would return quick results.
  
  So code or it didn't happen...
  
  nmap-parse takes an nmap xml file and spits out some of the results
  http://carnal0wnage.attackresearch.com/sites/default/files/nmap-parse.txt
  
  rubynmapsqlite3 takes an nmapfile and database name (optional), creates or connects to the database, populates the tables if it needs to, parses the nmap xml and puts it into its appropriate tables.
  http://carnal0wnage.attackresearch.com/sites/default/files/nmapsqlite3.txt
  
  ruby-nmap-parse uses the ruby-nmap gem to parse nmap xml files
  http://carnal0wnage.attackresearch.com/sites/default/files/ruby-nmap-parse.txt
  
  caveats:
  -my ruby coding sucks.
  -my SQL coding sucks worse.
  -code is released in "works for me" status
  -send diffs not complaints :-) unless you go crazy with it, in which case just send me a link to your code
  
  Next up pushing that data into a postgres database instead of sqlite3.

  Tags:  nmap text integer sid ruby mac-text metasploit  

• 1:00

  Nmap Upgrade

   » ‎ darkc0de
  Nmap Upgrade

  Tags:  nmap upgrade  

• January 20, 2010
• 21:00

  nmap-5.20.tgz

   » ‎ Packet Storm Security Tools
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin ip-fragments reliability-features dynamic-delay  

• 21:00

  nmap-5.20.tgz

   » ‎ Packet Storm Security Recent Files
  Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols (UDP, TCP, ICMP, etc.). Nmap supports Vanilla TCP connect() scanning, TCP SYN (half open) scanning, TCP FIN, Xmas, or NULL (stealth) scanning, TCP ftp proxy (bounce attack) scanning, SYN/FIN scanning using IP fragments (bypasses some packet filters), TCP ACK and Window scanning, UDP raw ICMP port unreachable scanning, ICMP scanning (ping-sweep), TCP Ping scanning, Direct (non portmapper) RPC scanning, Remote OS Identification by TCP/IP Fingerprinting, and Reverse-ident scanning. Nmap also supports a number of performance and reliability features such as dynamic delay time calculations, packet timeout and retransmission, parallel port scanning, detection of down hosts via parallel pings.

  Tags:  tcp nmap port fin ip-fragments reliability-features dynamic-delay