On Sat, May 13, 2006 at 10:55:13PM -0700, Fyodor wrote:
o Write a general scanning engine for abusing applications for port
scanning purposes. This would handle scanning through SOCKS and HTTP
proxies, and the existing FTP bounce scan would also be ported to this
engine. Proxy chaining must be supported.
Someone (who wants to remain anonymous) also suggested bouncing
through IMAP servers using the SELECT command. You do need to
authenticate, but it could be useful toward elevating privileges once
you sniff a mail password. Here are the details:
http://lists.darklab.org/pipermail/darklab/2006-January/000185.html
So I've added IMAP to the task. TOR is a possibility too. Anyone
know any other good protocols we can coax into port scanning for us?
Cheers,
-F
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev