Collaborate Disseminate
I am trying to find out all the vulnerabilities associated with my application and data server (both on the same machine). So I’ve decided to run nmap to see all the ports and other information that an invader could gain to attack my serve… Continue reading What are all the services that are shown in the output of nmap ? Are they safe? [closed]
I am trying to automate my recon process. For port scanning, I resolve subdomains to IPs then loop over those IPs with masscan. But is it worth it to port scan an asset that is hidden behind a web firewall? In other words, by doing this I’… Continue reading Port scanning against assets that are behind a WAF
Suppose this scenario:
You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and IPS/IDS are not a problem. You don’t nee… Continue reading Getting reverse shell from firewalled target
Suppose this scenario:
You are already inside a corporate network.
Suppose to find out a RCE in a X service.
The machine that hosts that service is behind a network-based firewall, ingress rules and IPS/IDS are not a problem.
You don’t nee… Continue reading Getting reverse shell from firewalled target [closed]
I’m using Scapy to output all connected computers and VMs connected to network:
from scapy.all import ARP, Ether, srp
target_ip = ‘192.168.1.1/24′
arp = ARP(pdst=target_ip)
ether = Ether(dst=’ff:ff:ff:ff:ff:ff’)
packet = ether/arp
r… Continue reading Scapy isn’t outputting any computers connected to network [migrated]
I’m working on a project where the program can detect when its being scanned for malicious purposes by checking how many ports are being scanned at the same time and scanning them back using the SYN method for TCP and the IMCP response for… Continue reading is the UDP or TCP protocol best suited for a so called stealth counter scan for open or closed ports [closed]
So I’m using an untrusted computer but on a trusted network (my home). The operating-system + hardware are trusted but the Profiles, certificates & software installed in the system are not trusted.
I can in fact see a bunch of certific… Continue reading Using Chrome on non-trusted macOS computer
I am able to ping a server on an vpn. However, when I use a normal nmap scan it does not pickup on the host. Doing a scan with host discovery turned off (nmap -Pn host scan) does show the host.
If I am not mistaken, should my ping not fail… Continue reading Why can I ping a server, but nmap normal scan cannot see the host?
[Crossposting from SO]
I am trying to make a port scanner in Python and trying to list which all ports are accessible by anyone remotely.
Using the socket.connect_ex package, I was able to check which all ports are open for my local machin… Continue reading How to check if my ports are exposed to the internet
I study routersploit and all I see is that you should set target and give an IP for scanning. This is great if you’re in the same network with the router or you know the public ip of the router you want to attack to.
But I want to scan for… Continue reading routersploit like scanner for networks nearby