EvilZone

Hacking and Security => Hacking and Security => : spark September 18, 2012, 06:29:19 PM

: Strange results with nmap ping scan
: spark September 18, 2012, 06:29:19 PM

Hi everyone

I have performed a ping scan with nmap from backtrack5 under virtualbox 4.1.10, and it shows all hosts in request as up!

(http://filebeam.com/f7730dab2f6e7bcccd5264ec15ec042c.jpg)

and trying the same thing with Fedora, i get a correct result:

(http://filebeam.com/a4e54ef61090897034703dd255ac7102.jpg)

anyone can help and tell me from where i get the spoofed RST packages (in bt5) when the host i not up?

In both cases i use nmap version 6.01

EDIT: Fedora is the host OS

: Re: Strange results with nmap ping scan
: spark September 19, 2012, 05:28:30 PM

Already 28 views and not an answer yet..  ::)
well it is either  a noob question  ;D , or a vague one..
Anyone to give a feedback in both cases?

: Re: Strange results with nmap ping scan
: s3my0n September 20, 2012, 01:18:19 AM

Not sure about this one. Probably something to do with VirtualBox network settings. Have you got "bridging" in VB network setting for this virtual machine? Enable that.

Also you can try doing it the new way with "-sn --reason" . I think "-sP" is deprecated (man nmap | grep SP doesn't show this option anymore).

Read the latest documentation at:

:

http://nmap.org/book/man-host-discovery.html

: Re: Strange results with nmap ping scan
: spark September 23, 2012, 06:36:50 PM

Thank you for your help, the problem was the with the virtualbox networking configuration
seems that when it is set to NAT (defualt) , The VirtualBox NAT device reset the connection for some reason..