Using NMap.....mass port scanning question?

[FractalInsanity]

So the app is pretty straightforward, however, I'm curious if you wanted to scan multiple hosts non-stop in succession rapidly would you have to write a program to rapidly inject inputs into the scan query? Is this a lot more doable when using linux than windows?


How would one go about this.....I'm know how to use Nmap,  as it is pretty clear, however I know you can scan insane amounts of ip's and curious how you would do it if you wanted to?


Thx guys as usual,
FI

[bubzuru]

nmap has its own lua based scripting language for a start so it doesent realy mater on the os if you would need to write a script

also what kind of ips do you want to scan
have you got a list, random ips ?

give me more info

[ande]

I dunno about random IP's but you can do range scans by doing 11.11.11.11/24 or 11.11.11.11-22.22.22.22 or alike. Nmap is pretty flexible.

[NeX]

nmap's -iR <number of hosts to scan> is for random generated hosts.. as for injecting, check out the NSE engine

Code: [Select]

http://nmap.org/book/nse.html


[bubzuru]

Yes the scripting engine will work for what he wants
But I think the problem is more simple, he just needs to explain better

[FractalInsanity]

Thx for your responses....I guess I could have communicated a little more efficiently lol


Anyways, I read through Nmap and learned a lot, in addition, that Fyodor is hardcore with Nmap. I wouldn't have guessed it was written in LUA.


Is Lua the most efficient language to write network apps in? I originally wouldn't have guessed so but finding out it is based on C....maybe it is? C is amazing for hardware specific tasks/embedded system....

[bubzuru]

Thx for your responses....I guess I could have communicated a little more efficiently lol


Anyways, I read through Nmap and learned a lot, in addition, that Fyodor is hardcore with Nmap. I wouldn't have guessed it was written in LUA.


Is Lua the most efficient language to write network apps in? I originally wouldn't have guessed so but finding out it is based on C....maybe it is? C is amazing for hardware specific tasks/embedded system....

no your confused

nmap is coded in c so is lua
lua is just a scripting language like 'perl' for example.

also it has no native network support. you can access winsockets using a dll (since lua can use functions from c dlls) <-- thats what gives lua its power (dlls coded in c used from your script) (thats how Fyodor created nse for nmap)

did you solve your problem then ?

[RedBullAddicted]

Hi,

maybe you want to have a look on using nmap with metasploit. You can start with a basic scan to look for open ports like the tcp syn scan. Then you can use an rc script for querying the metasploit database and create new scans for specific ports. It's not the fastest way to do this but I like that very much.

I started a thread with a bit of information on how to do that in metasploit. Maybe you have some input for that after you played around a bit with this.

http://evilzone.org/scripting-languages/%28ruby%29-metasploit-rc-files-predefined-variables/

Cheers