Penetration Testing: Re: NMAP Concurrent Scans

["Burak CIFTER" <hybridus.ml () gmail com>]

It may return false result due to ids/firewall rules. If there's no
firewall, you won't need to do xmas scan. So I understand that the
host is protected somehow. In this case (scanning with all techniques
in the same time), the result wouldn't be reliable.

You should perform the scan using techniques in an order from paranoid
level of sensivity to connect scan.



Burak Çifter


On 8/10/07, Clone <en0lc () yahoo com> wrote:
> Hello Everyone,
>
> I'm new to NMAP. I have a curious question that I
> wanted to get expert opinion on...
>
> I was wondering whether running SYN, FIN, XMAS, NULL
> and ACK scans in parallel on a target generate false
> results. Since same client IP is  asking for opening &
> closing a connection on target machine will it not
>  render some ports open and other closed in the
> report?
>
> RGDS
>
>
>
>
> ____________________________________________________________________________________
> Looking for a deal? Find great prices on flights and hotels with Yahoo! FareChase.
> http://farechase.yahoo.com/
>
> ------------------------------------------------------------------------
> This list is sponsored by: Cenzic
>
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE today!
>
> http://www.cenzic.com/downloads
> ------------------------------------------------------------------------
------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------