Prev | Current Page 237 | Next

Mark D. Spivey

"Practical Hacking Techniques and Countermeasures"

It will never
end. This can be useful for statistical sampling of the
Internet to estimate various things. If you are ever really
bored, try nmap -sS -iR -p 80 to find some Web servers
to look at.
-p This option specifies what ports you
want to specify. For example, -p 23 will only try port 23
of the target host(s). -p 20-30,139,60000- scans ports
between 20 and 30, port 139, and all ports greater than
60000. The default is to scan all ports between 1 and
1024 as well as any ports listed in the services file which
comes with nmap.
-F Fast scan mode Specifies that you only wish to scan
for ports.
-D Causes a decoy scan to be
performed, which makes it appear to the remote host
that the host(s) you specify as decoys are scanning the
target network too. Thus their IDS might report 5??“10
port scans from unique IP addresses, but they will not
know which IP was scanning them and which were
innocent decoys. While this can be defeated through
router path tracing, response-dropping, and other
???active??? mechanisms, it is generally an extremely
effective technique for hiding your IP address. Separate
each decoy host with commas and you can optionally
use ME as one of the decoys to represent the position
in which you want your IP address to be used. If you put
ME in the 6th position or later, some common port scan
detectors (such as Solar Designer??™s excellent scanlogd)
are unlikely to show your IP address at all.


Pages:
225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249