[prev in list] [next in list] [prev in thread] [next in thread]
List: nmap-hackers
Subject: Idle scanning paper released
From: Fyodor <fyodor () insecure ! org>
Date: 2002-09-16 6:30:05
[Download RAW message or body]
Hello everyone,
One of the coolest yet still relatively obscure features of Nmap is
the Idle scan (-sI). Not only does this allow for a completely blind
portscan (no packets sent to the target from your real IP), but it can
even allow you to bypass packet filters in certain circumstances. I
think one reason this has not taken off is that documentation is
pretty scarce. So I have written an informal paper describing Idle
scanning as well as several other exploits based on predictable IPID
sequence numbers. It includes real-life examples as well as a section
on defending yourself from these techniques. The paper is at
http://www.insecure.org/nmap/idlescan.html and feedback is welcome.
If you want to test Idle scanning functionality, I recommend Nmap
3.10ALPHA3 (released an hour ago) as it fixes several bugs and
improves the algorithm slightly.
Cheers,
Fyodor
--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to
nmap-hackers-help@insecure.org . List run by ezmlm-idx (www.ezmlm.org).
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic