Ultimate Nmap Scan
richrines.com
Ultimate Nmap Scan
1–10 of 14 posts
Re: Ultimate Nmap Scan
#2... or, "why I can't stand nmap, and more often than not end up writing a trivial port scanner with EventMachine every time I need to do this."
Re: Ultimate Nmap Scan
#3Wow really, spoofed Macs, fragmented packets...for what? Stealth? LOL no way not with all those flags enabled.
nmap -sS -F -P0 1.2.3.4 is all you need for a scan, maybe sometimes a -sV and -O thrown in. Change the rtt settings if things are taking forever (i.e. heavily firewalled hosts).
Just cause nmap has a million options doesn't mean you should use them all. Don't worry after a couple hundred scans in the wild you'll figure this out yourself.
tptacek- Yeah sorry bro, we don't go and make our own tools every time something isn't just quite perfect, I don't have the time...got a real life.
Re: Ultimate Nmap Scan
#4... or, "why I can't stand nmap, and more often than not end up writing a trivial port scanner with EventMachine every time I need to do this."
'slow' was a little too direct, however whiny comments like yours should be downvoted to ruin too. show us the code or blog post you wrote, else stop being a little bitch. Also quote marks are for quoting ffs.
Re: Ultimate Nmap Scan
#5... or, "why I can't stand nmap, and more often than not end up writing a trivial port scanner with EventMachine every time I need to do this."
'slow' was a little too direct, however whiny comments like yours should be downvoted to ruin too. show us the code or blog post you wrote, else stop being a little bitch. Also quote marks are for quoting ffs.
Context: http://news.ycombinator.com/item?id=2315618
Actual post: http://news.ycombinator.com/item?id=2317547
Re: Ultimate Nmap Scan
#6... or, "why I can't stand nmap, and more often than not end up writing a trivial port scanner with EventMachine every time I need to do this."
… or, "I'll just build my own hammer instead of using this toolbox filled to the brim with all kinds of tools."
I could spend a minute (or two because I don't know EventMachine well) coding that port scanner like you did in [0], or I could just type "nmap -p 1-65535 host". I think you are suffering from not invented here syndrome.
Re: Ultimate Nmap Scan
#7... or, "why I can't stand nmap, and more often than not end up writing a trivial port scanner with EventMachine every time I need to do this."
… or, "I'll just build my own hammer instead of using this toolbox filled to the brim with all kinds of tools." I could spend a minute (or two because I don't know EventMachine well) coding that port scanner like you did in [0], or I could just type "nmap -p 1-65535 host". I think you are suffering from not invented here syndrome. 0: http://news.ycombinator.com/item?id=2317547
Come on. If that just worked, you don't think I'd do it? I've got as much NIH in me as the next nerd, but did you read anything I wrote in that thread, or even this article?
Run that all-ports nmap against a firewalled (read: any) corporate network sometime and time it against the one-minute EventMachine script.
I'm sure there's some combination of nmap flags that slaughters EventMachine, but I can't be bothered to figure them out, because if I just use the script I can also pump my output to the exact output format I need.
I get it, by the way. You like nmap. Everyone likes nmap. Mostly. I know I'm not the only professional security person who gets frustrated with it, and I think it's interesting how not-hard it is to substitute for it if you can code even a little bit.
Re: Ultimate Nmap Scan
#8Earlier quoted context omitted.
… or, "I'll just build my own hammer instead of using this toolbox filled to the brim with all kinds of tools." I could spend a minute (or two because I don't know EventMachine well) coding that port scanner like you did in [0], or I could just type "nmap -p 1-65535 host". I think you are suffering from not invented here syndrome. 0: http://news.ycombinator.com/item?id=2317547
Come on. If that just worked, you don't think I'd do it? I've got as much NIH in me as the next nerd, but did you read anything I wrote in that thread, or even this article? Run that all-ports nmap against a firewalled (read: any) corporate network sometime and time it against the one-minute EventMachine script. I'm sure there's some combination of nmap flags that slaughters EventMachine, but I can't be bothered to f…
Your script sequentially scans ports 1 to 65535 of a given host. My nmap command line does the same. Fair comparison in my opinion. Of course nmap has more complicated command lines, but then again, your script would be a lot longer too if you wanted more complicated features.
Yes, you are a security professional and you don't like nmap, and you have met others who feel the same way. The reason nmap is so popular is because there are security professionals who do not share your opinion. And judging by the popularity of nmap, there are a lot of them.
Re: Ultimate Nmap Scan
#9Earlier quoted context omitted.
'slow' was a little too direct, however whiny comments like yours should be downvoted to ruin too. show us the code or blog post you wrote, else stop being a little bitch. Also quote marks are for quoting ffs.
Context: http://news.ycombinator.com/item?id=2315618 Actual post: http://news.ycombinator.com/item?id=2317547
cheers for the references, I can now read them and learn something.
I stand by my argument in spite of the downvote though - whining about something and expecting everyone to have read your previous thoughts on the subject is douchey whether or not you're a hot-shot HNer.
Re: Ultimate Nmap Scan
#10Earlier quoted context omitted.
Context: http://news.ycombinator.com/item?id=2315618 Actual post: http://news.ycombinator.com/item?id=2317547
cheers for the references, I can now read them and learn something. I stand by my argument in spite of the downvote though - whining about something and expecting everyone to have read your previous thoughts on the subject is douchey whether or not you're a hot-shot HNer.
a summary of the linked discussion:
# tptacek dislikes that nmap is in C; others point out that this was not a bad language choice back when it was written
# tptacek complains that nmap is more of an all-in-one tool; rcamera posts that it is also provided as smaller tools eg. ncat, nping, ncrack, etc. (pretty cool - I didn't know that)
# tptacek provides about 60 line ruby script which to my untrained eyes look like they perform more or less the same function as `nmap -p T:1-65535 $IP`
edit: he also complains about performance - I'd be very surprised if the ruby script outperformed a suitable nmap command - maybe you need -T5?