Security Basics: Re: how to find out a list of available ftp servers on LAN

[Pranay Kanwar <warl0ck () metaeye org>]

Hi,

Looking at your problem nmap can do it faster :)
( kindly ignore the ip class :) )

%time ./propecia 172.31.1 21
172.31.1.11
172.31.1.15
172.31.1.24
172.31.1.41
172.31.1.60

real    0m1.029s
user    0m0.000s
sys     0m0.008s

%time nmap -n -P0 -sT -p 21 -oG out  --max-retries 0 172.31.1.0/24
&>/dev/null ; grep open out

real    0m0.916s
user    0m0.036s
sys     0m0.037s
Host: 172.31.1.11 ()    Ports: 21/open/tcp//ftp///
Host: 172.31.1.15 ()    Ports: 21/open/tcp//ftp///
Host: 172.31.1.24 ()    Ports: 21/open/tcp//ftp///
Host: 172.31.1.41 ()    Ports: 21/open/tcp//ftp///
Host: 172.31.1.60 ()    Ports: 21/open/tcp//ftp///

The option -P0 don not ping host before scanning, -n no reverse dns
resolution, max retries 0 , all these options make nmap sort of
*similiar* to propecia.

Note: nothing beats nmap :D.

Regards,

warl0ck // MSG
http://www.metaeye.org