Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [nmap]

Nmap (Network Mapper) is a security scanner originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network, thus creating a "map" of the network.

255 questions
1
vote
1 answer

netstat vs nmap to find IPs in a local network

I'm in a local network : IPv4 shared address space (100.x.x.x). Connected to a wifi hotspot. Ip ranges : 100.76.164.0/23 When I run : nmap 100.76.164.0/23 : It says all the hosts are down netstat -rn : it gives me a list of about 25 local ips…
Johnny Pralo
  • 11
  • 2
1
vote
1 answer

nmap port 22 filtered implications

I did the nmap scan on the list of external public ip (linux hosts). I tried to test out if any not needed services are opened. I realized there are many unfiltered ports on ssh tcp/22, however when I tried to ssh on the hosts I got the connection…
Jack
  • 11
  • 1
  • 2
1
vote
1 answer

How to prevent nmap from fingerprinting HAProxy

In our periodic security scans, our HAProxy instances are always reported as a version disclosure vulnerability. On further inspection, it appears that there are no version banners in any responses and that nmap is responsible for detecting HAProxy…
Bas Peters
  • 111
  • 4
1
vote
0 answers

nmap showing different results every time

I am running: nmap -sP 192.168.251.0/24 to see the hosts in the office network. Every time that I run the command it shows a different result, for instance it sometimes shows 192.168.251.13 192.168.251.15 192.168.251.17 the next second it will…
Simon Ernesto Cardenas Zarate
  • 251
  • 1
  • 3
  • 12
1
vote
1 answer

SQL Server 2014 Disable SSL/TLS

I am running SQL Server 2014 on Server 2012 R2. Both are updated and current. I did a clean install of both and nothing else. I then requested VPN access for an offsite vendor and our security group informed me that SSLv3 and TLSv1.0 needed to be…
Ty.
  • 31
  • 1
  • 2
  • 4
1
vote
1 answer

Can a Syslog server recognize a client OS?

I recently set up a central syslog server. Logs are organized in files, in folder named after the client machines (using DNS), and scanned with logcheck. Some of the client machines have more than one OS (namely Linux and Windows), and end up…
Matteo Giani
  • 103
  • 2
  • 10
1
vote
3 answers

SSL unsupported protocol error

I'm trying to use ncat to connect between virtual windows7 and linux machines. On linux: ncat -vnl 4444 --ssl On windows: ncat -v 10.10.14.2 4444 --ssl And when I try to connect from the client I get this error: Ncat: Failed SSL connection from…
Spring
  • 111
  • 1
  • 4
1
vote
1 answer

Apache/Tomcat web server: nmap always returns that all http-methods are allowed

I'm running a web server with Apache http server in front of an Apache Tomcat server. My goal: Disable http-methods DELETE and PUT on the web server. According to OWASP (https://www.owasp.org/index.php/Test_HTTP_Methods_(OTG-CONFIG-006)) this should…
chloesoe
  • 335
  • 2
  • 17
1
vote
1 answer

What is the fastest way to scan all ports of a single maching using tcp scan

After reading this post here, from security.stackexchange, I was wondering what is the best way to scan all ports of a single maching using tcp scan only. "nmap -sT -p 1-65535 localhost" is what I would try naturally but, I suppose, there is a…
Doe Joe
  • 11
  • 1
  • 3
1
vote
2 answers

Network Scan, Filtering for Top Level Domain

Greetings, I have a list of 2 /24s worth of IP addresses in seperate text files. What I am interested in doing is finding a way to resolve the hosts of these IP addresses and filter out to display only the top level domain. for example; 192.168.1.1…
Nick O'Neil
  • 1,771
  • 11
  • 10
1
vote
1 answer

ncat on UDP protocol (RH 7)

I'm resuming the discussion "Check if remote host/port is open - Can't use GNU Netcat nor NMap - RHEL 7". I can't obtain the correct result because on my rh versions (5.6 and 7.1) there isn't the path /dev/tcp nor /dev/udp. Here…
intore
  • 121
  • 3
1
vote
2 answers

Can nmap scan/test all answers from round-robin dns?

I have a round-robin dns record I want to test with nmap, currently it only tries one of the IPs (if I run a loop it checks each in order). Is there a way to have nmap test all A/AAAA records from a dns record? example: nmap -p25…
Jacob Evans
  • 7,886
  • 3
  • 29
  • 57
1
vote
1 answer

Does anyone know better way to scan for IPMI devices?

Iam using a simple nmap scan on IPMI/BMC port 623/tcp. Is this enough or Is there anything more I need to be aware using nmap? nmap -p 623 IP-IPEND
Victor
  • 71
  • 2
  • 8
1
vote
2 answers

vsftpd hide version on port scan

I'm looking for methods (iptables rules, etc...) to prevent the version from showing on a nmap report for VSFTPD. Currently, when executing: nmap -Pn -p 21 -sV localhost Nmap scan report for localhost (127.0.0.1) Host is up (0.000086s latency). PORT…
user387158
  • 11
  • 1
  • 2
1
vote
1 answer

nmap shows strange open ports

Running nmap on my localhost shows me strange open ports: $ nmap -p- localhost Starting Nmap 6.47 ( http://nmap.org ) at 2015-12-28 12:14 CET Nmap scan report for localhost (127.0.0.1) Host is up (0.00047s latency). All 65535 scanned ports on…
lumbric
  • 234
  • 2
  • 9
1 2 3
…
16 17